<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:cfb6f2f8-ece5-312c-973f-c8695eee417d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/jenkins-war@2.562-rc38227.49626ca_f6f50?type=war">
      <group>org.jenkins-ci.main</group>
      <name>jenkins-war</name>
      <version>2.562-rc38227.49626ca_f6f50</version>
      <description>Creates a war file. Also includes additional static web resources, such as images, CSS, JavaScript, and some HTML files.</description>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/jenkins-war@2.562-rc38227.49626ca_f6f50?type=war</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/incrementals/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jenkinsci/jenkins/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/cli@2.562-rc38227.49626ca_f6f50?type=jar">
      <group>org.jenkins-ci.main</group>
      <name>cli</name>
      <version>2.562-rc38227.49626ca_f6f50</version>
      <description>Command line interface for Jenkins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">da6cfd5ff2e81342decd5819ec817ef8</hash>
        <hash alg="SHA-1">a0ca3c231e4b52f8e1a133f9addcb2ba5af37da2</hash>
        <hash alg="SHA-256">7b449af04aba5e38e507048435cc964b0c350c234da6b63f99e19e4f4aabb03d</hash>
        <hash alg="SHA-512">f406531331a9a5a93e83bc27b74762afa1e6c07f320d8cbcc4ad29d6630248b3d2b4416d2bcf31f37eb8fec9c1aeb309761d1e115fa750b9e067cfab9ac5245d</hash>
        <hash alg="SHA-384">721f455b3302ac07c3a63abfafb8486ae49cb0ddf260d54c1b699d6d13e7d4e98ee236406ad1ab16b73f183a0d2812e9</hash>
        <hash alg="SHA3-384">56106aad331a783b07662552ab345b3ff00408e8b0fa4fc605b4120cc078b3c4affd7540bb94b37ea2f19616f1b3a67e</hash>
        <hash alg="SHA3-256">39872d758250755db9c36aa903977f9cef8ec409477c3b33125a63650d1feb27</hash>
        <hash alg="SHA3-512">3ef96c02e373f1f5fdcafd58069c8c03d744ee92a2e8079f9acac5215a5e34df6789f3aee4880ad00646e1a54a21576507136af3be3d8408a1f7b79427bfa3f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/cli@2.562-rc38227.49626ca_f6f50?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jenkinsci/jenkins/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/remoting@3355.v388858a_47b_33?type=jar">
      <group>org.jenkins-ci.main</group>
      <name>remoting</name>
      <version>3355.v388858a_47b_33</version>
      <description>Contains the bootstrap code to bridge separate JVMs into a single semi-shared space. Reusable outside Jenkins.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7a9a77a64f02eb9f5dbceff9e9a349e2</hash>
        <hash alg="SHA-1">bff72f2292ed349c38ce8d2f64effec99331896e</hash>
        <hash alg="SHA-256">f8ff1d49076a2ee0d3f8cc60168f43c23c2277c4cbdddaf82a52b2558ad80df5</hash>
        <hash alg="SHA-512">a809f1148ea8ddfc4cf7b133a2e3860882d5b10257abcf7dd8df558205f62931e0b3dd9158a6e68b392f04ecc8513525ed0f5dfe5de4cfc40fd46781124fbe76</hash>
        <hash alg="SHA-384">adbf72c1be83d6462dad03f82f4403908757bf2458013d9149eeb38066a30072a418b4920c259550d251de997187a6db</hash>
        <hash alg="SHA3-384">77e228eab0e85ffc30971f4e0b9cf5b83393ce1fc4371297f31ad388d8acce15331c0a52d87d3e592deaf5971ae159ca</hash>
        <hash alg="SHA3-256">c9f2941cfdcb59a9b633e7b9923fccb99b38cf13315f7e734e8127e70dcce5b7</hash>
        <hash alg="SHA3-512">5d98a3fd1712d3ccb8a0e8c38ae358bf6a87519abdc2553489e68324ef1cae3a65149db9bf41817c1cdd84bcdd3cd948b05cf9653a9f8719ec59f0ba07b9ac83</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/remoting@3355.v388858a_47b_33?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/remoting</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/remoting</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/jenkins-core@2.562-rc38227.49626ca_f6f50?type=jar">
      <group>org.jenkins-ci.main</group>
      <name>jenkins-core</name>
      <version>2.562-rc38227.49626ca_f6f50</version>
      <description>Jenkins core code and view files to render HTML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22b13e802ca19faa3ab58b39e1f78ff2</hash>
        <hash alg="SHA-1">962e9907924b4bdbcd948f4f26cc2dd404479dfe</hash>
        <hash alg="SHA-256">4268cbb84a24303a470844c73020c7c47620bbfeb574ade42fbcae93feb0110e</hash>
        <hash alg="SHA-512">c6cba0ce10ac6e2d105ba860f8564f777d5c90e735f0228bb95ee44584ae2d989482dc71ee66443c887c7467a5e0ca6ad4fb1f036dfa99a0fcb11d32851d22e0</hash>
        <hash alg="SHA-384">34e96e31d2b660e1da1348513addae91a2f17754f059805d025aa1f59094d49044937b61c76d962330872673bc517887</hash>
        <hash alg="SHA3-384">af5e689362b59e3b996d30f460165a7201b52099a3b902dce1f697177551f82635f08e0bdc1b592395c990ea86d10c40</hash>
        <hash alg="SHA3-256">dc435d6c6b1b9e09e280e51b7b3341bd1a1626aea8c5e252f0f19de0c850b398</hash>
        <hash alg="SHA3-512">16e730ae25d55b36c1f75f54acef7e8c6d4c4a1dc33e1ba55e8158c2d28d7e5de0ed0322e4088c5130c601ad03cc95f1eab32474dd620dca72122051a52dfcca</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/jenkins-core@2.562-rc38227.49626ca_f6f50?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jenkinsci/jenkins/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/args4j/args4j@2.37?type=jar">
      <publisher>Kohsuke Kawaguchi</publisher>
      <group>args4j</group>
      <name>args4j</name>
      <version>2.37</version>
      <description>args4j : Java command line arguments parser</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f58e89e55a715448f1eac17edaf4b511</hash>
        <hash alg="SHA-1">244f60c057d72a785227c0562d3560f42a7ea54b</hash>
        <hash alg="SHA-256">5a13b0f7ff519183e55b8f453b8faaa23b92ccf0443f1fac515fedf2246bdc18</hash>
        <hash alg="SHA-512">2237b8fa0a2cd602637a47b24893486ff8251efdc0b9e992239b9f870ac58d66433280e2bc16bc8274095811f029cfdc02fce3131c9f2e96352fff923ab31f8b</hash>
        <hash alg="SHA-384">ec839cfd5517bdbf27c76f7daf279217918936e7f06402193332c905485c42ea6d458d348bbcfc9896153c4e2d2e4ea3</hash>
        <hash alg="SHA3-384">3a69c3e40300cb7077fdb2ee0a91a425557bdb1e6b9150aca7ac644fee527ac357e240b795cc5644b375a53d26316ed5</hash>
        <hash alg="SHA3-256">7e15c28c8461c2543323c4e5377bf67aaf2def2df3b528eeaaa86f49051994bf</hash>
        <hash alg="SHA3-512">7d1632b2e38c54a116ca73fef42892c321d7687408070f3f3ffdb0f91caf154ec53ca3624c1b673cb71bdd57b8082e37d631ce39d9cd7a07a8d3cd671564d4dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/args4j/args4j@2.37?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://args4j.kohsuke.org/args4j/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://args4j.dev.java.net/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://args4j.dev.java.net/servlets/SummarizeList?listName=users</url>
        </reference>
        <reference type="vcs">
          <url>http://args4j.kohsuke.org/args4j/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.9.8</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d4c2e7bd090be697ad409a4e75684a94</hash>
        <hash alg="SHA-1">ca4a2783a6123e67124fd7feb4caccd2e2ac9a73</hash>
        <hash alg="SHA-256">6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c</hash>
        <hash alg="SHA-512">a2dfdd7972db1adc141a845bc8a3fb81325d987dff1237017f58120f7caa6f1be5bdf2ea79bac7fc2db700596e62bb253e2b0762939f72905feb59fd6e29eaeb</hash>
        <hash alg="SHA-384">195ffc652c90e70b81a2382ad6c45ea62685efdd3a2275253578ff4bdd31ef13b58826a3660e6d790302d44c3d113c78</hash>
        <hash alg="SHA3-384">9fc94170c4172fd3e503c426b7d0a9ee0ada37b578acd0ff359b9e4f34b5a70ca82db9aad4820803d19b1040d3a9ec72</hash>
        <hash alg="SHA3-256">b7763028ce7f89bf44d27fb71570cb7bc66a8cfc6c202813bbf9e37df3983ab8</hash>
        <hash alg="SHA3-512">2afeca14b480b86e836e122e30c6db85231938332c59e706b70eb6a499bbad6a32676e4416a6d2f56e92588772de13640b84907826eff4817d172b6cc969a72a</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.6.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>33.6.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">34a4f258ed23d2e876a6e4666bb3b1c5</hash>
        <hash alg="SHA-1">c376b13067cc99a5774403530953f7b05a91e218</hash>
        <hash alg="SHA-256">dc573e1fca4fd5454f4a5fd3d7da2df03002876a4175bafc14a95980dd7713b3</hash>
        <hash alg="SHA-512">1442688a4409e961f2cee38ac904c0869bb6c9f06bf8b67b80eeafb20bc1af518cc4e9f786b2f4917855b2b9ad8ed4a3dec6f1a12f10616e25398c127914433b</hash>
        <hash alg="SHA-384">e75be17b490c9f059676f5fb4e18e74542eeb6236891cc1e3fc8d3def0ec1afb07e34279ffef8e55273431e6eece3a38</hash>
        <hash alg="SHA3-384">a37b65c84e2ee662cf4cea2f9b60f231d7012bd82a234c9f4e2b7a358f1db6ad8135c9705407b1a4a64fe8fadd6bcd00</hash>
        <hash alg="SHA3-256">9e0f02ce2f5afac968f6045de0d467a23c4c570e9ea1ae0fbee0de0c40547327</hash>
        <hash alg="SHA3-512">4d6845505f11539b91f610721f9fb4006dbdd8b2366ae8993380be9e3e9adaf045d4e435e2f5459b574920dfc692240a866b382bfd5901fe16482d539a4ce156</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@33.6.0-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.3</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29a782e90f6b37218b18bb880d2a8f4a</hash>
        <hash alg="SHA-1">aeaffd00d57023a2c947393ed251f0354f0985fc</hash>
        <hash alg="SHA-256">cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb</hash>
        <hash alg="SHA-512">72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf</hash>
        <hash alg="SHA-384">9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8</hash>
        <hash alg="SHA3-384">ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3</hash>
        <hash alg="SHA3-256">08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f</hash>
        <hash alg="SHA3-512">7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar">
      <group>org.jspecify</group>
      <name>jspecify</name>
      <version>1.0.0</version>
      <description>An artifact of well-named and well-specified annotations to power static analysis checks</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash>
        <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash>
        <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash>
        <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash>
        <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash>
        <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash>
        <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash>
        <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jspecify.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jspecify/jspecify/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@6.0.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>6.0.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 8 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f1f2450f527c2076b85227f413b4e25</hash>
        <hash alg="SHA-1">9b422c69c4fa1ea95b2615444a94fede9b02fc40</hash>
        <hash alg="SHA-256">b4d4f7ec5e8fc17b4f98dee9d3f6cf6ae3ae13e2e5ed4b2f7bbf09bc4bb675d5</hash>
        <hash alg="SHA-512">a08ac6ee607d6420ad33789773556fcedb0444fc5e8863546ced71552c5dae0729314458aece36c89e338a321e40839ee6e133ba19bfee1d1cd701c623c21823</hash>
        <hash alg="SHA-384">9944897a476e9357c7fb52380a8dc3d2cd03a38ea83d787f8bb1203045f3263b665dc7b4108956e6bc08c67a00fe3be8</hash>
        <hash alg="SHA3-384">3671e60e9dfd3fbf28242f9a1bd278a5d3e0678b62b27fd401ae45c8acadf3f8a3e34cfa163108e5aca4a6a78d7845d8</hash>
        <hash alg="SHA3-256">4894765f315bfcea4f5fa1a191c22458848108008b2f5c1c12e3689433e8aef3</hash>
        <hash alg="SHA3-512">644d5203a8a7bbbe4a82337b0ce85310f0069add4fd132bc5450dbb993f0481cd0e1cca623d6d5b775d774b2a78195a62cdc14c405695117552fb1b221a37ea0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@6.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guice/guice</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guice</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guice/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/google-guice/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guice/guice</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.txw2/txw2@20110809?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.xml.txw2</group>
      <name>txw2</name>
      <version>20110809</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67aa3d67701de0b808ff606e1756c8bb</hash>
        <hash alg="SHA-1">46afa3f3c468680875adb8f2a26086a126c89902</hash>
        <hash alg="SHA-256">3c535fd9d38ce20b8c9031086710f0e6f3175e1a638fa088b3de43e7193211d7</hash>
        <hash alg="SHA-512">834cafc1e3190d69efa346acf082f6c630cef542efc598ce367517296555cb4f5a343dec1e91c1ced28d49bd7ac7ec8f5ace68139708b78442cc8e43c0d82557</hash>
        <hash alg="SHA-384">027504da23a28a634a3749152f93772aaa058d81e5c2c6c3f3de089e89d7ac28065fab3d1a06637aab9144d10558e103</hash>
        <hash alg="SHA3-384">efc961edbc031ea8da099b682c5c9147f33d50040200da43943b4704b031e3616d25850a3bf7a1d3c8bfc635e20d73bf</hash>
        <hash alg="SHA3-256">e076250e719f0b342b4128b3323fc5d3ed76a53a7471fd17935f2b2154d71f7f</hash>
        <hash alg="SHA3-512">77b840dc829933b87ae17e344996988dcdc561cca25c5569142eb069a6bc0a27b3badb571841972684b43906fb5b4c893a95509fdfd154cd07cba1e5938a08f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
          <url>http://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.txw2/txw2@20110809?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://txw.java.net/txw2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://java.net/jira/browse/TXW</url>
        </reference>
        <reference type="vcs">
          <url>http://java.net/projects/jaxb~version2/show/tags/txw2-project-20110809/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar">
      <group>relaxngDatatype</group>
      <name>relaxngDatatype</name>
      <version>20020414</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd667fbdaf3190bdd8aee4e8e2d12d5c</hash>
        <hash alg="SHA-1">de7952cecd05b65e0e4370cc93fc03035175eef5</hash>
        <hash alg="SHA-256">2a2563efc911f431250214220570fac8ec3f43c3ec1e47328cee78062f81b218</hash>
        <hash alg="SHA-512">0f00b7fff744d0d5ebaa03733ec712a3c434f0e3dc91e42c2301471d9fc80ae55a2f2892ea2590bac8f70b0ca3bcd3744369f196774105dc69883c54d46f228f</hash>
        <hash alg="SHA-384">70c50ab15376798699afc7d625c89a2fa76c1398fe198006eae048a877bc005070b936fbc7caad97058d0a7f8bca900f</hash>
        <hash alg="SHA3-384">d336b5f43d1ba08a61deb977686e8e3d01310fa38f5aac22627eacdb8fc6d50fef1a25a11ddd7dcc782ae92bb824b903</hash>
        <hash alg="SHA3-256">5116706489428b75146de6eda532aa01a454dcd252231960103b4bbf142cb844</hash>
        <hash alg="SHA3-512">3948d5f716154a976c70a4b1fb730cd26fd502f747e6863db225827461fac1fd4fcf3baaabd937e7678bc4b149ce39ecf3293e6749727338a41d20bb5186d1ea</hash>
      </hashes>
      <purl>pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.xstream/xstream@1.4.21?type=jar">
      <publisher>XStream</publisher>
      <group>com.thoughtworks.xstream</group>
      <name>xstream</name>
      <version>1.4.21</version>
      <description>XStream is a serialization library from Java objects to XML and back.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">767be88fc6ec4bb96e2906a17aab8e5b</hash>
        <hash alg="SHA-1">65cb3e7f809b18b9aab43f2338ee5b320f72d7bd</hash>
        <hash alg="SHA-256">f56586f3de59ae2a49430acbc9f27942b8c5cebec9245c869fae7136733333ec</hash>
        <hash alg="SHA-512">dbaf02229503c9c69198c7f90f361a20d68c6f1a5c6238d298c13bf8c5090b1eba99307c668481a4c7901fe23a7175f6a5218ccf40c45422bc46894f29cc87c5</hash>
        <hash alg="SHA-384">3679a236d0ed3a4a8a12a5758238f96f307454062bfdfaf26a766aa0199fe0c9398492b7e0be55641c39da4ecd406211</hash>
        <hash alg="SHA3-384">b702a358ea938e025cdedba2a6e858cb44083ad76c5cde65a3c792a03c658a7241a7d792e824235fd0715aa7264ed164</hash>
        <hash alg="SHA3-256">74d29484f714477f43bb798915f204e1179894c630d181030f9b7f2c24ad86a4</hash>
        <hash alg="SHA3-512">f16f8d4a38e6f093e3c30c27d6195f0d7d1dd061e31987c5931fab97bc11adf15ecd291d6a77018cb6354d7a1845e188c84730de86187fbd086e7447ad066910</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.xstream/xstream@1.4.21?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://x-stream.github.io/xstream</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/x-stream/xstream</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/x-stream/xstream/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/xstream-user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/x-stream/xstream/xstream</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.github.x-stream/mxparser@1.2.2?type=jar">
      <group>io.github.x-stream</group>
      <name>mxparser</name>
      <version>1.2.2</version>
      <description>MXParser is a fork of xpp3_min 1.1.7 containing only the parser with merged changes of the Plexus fork.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d7e42409dfdcee9bd17903015bdeae2</hash>
        <hash alg="SHA-1">476fb3b3bb3716cad797cd054ce45f89445794e9</hash>
        <hash alg="SHA-256">aeeee23a3303d811bca8790ea7f25b534314861c03cff36dafdcc2180969eb97</hash>
        <hash alg="SHA-512">c6578e6d5356b9ff6f80ce2fada028387f78b57099e85eba49b4e80f057fd124c338df2193190072e65b71d4f10d749e3890fae11738e5d7350bf44125fb7d7e</hash>
        <hash alg="SHA-384">e99a1051767142084a6cad9c26b3f7cd03719a6ced00b0f5e4b15fedbc3c1644ad8ce372ca16d869578fb6e990195bde</hash>
        <hash alg="SHA3-384">abce50b29b8463b0d9a6ef3ee6d9e7668feedf4b33d36105e5ca16e8db585c4dde3f93f699a3836f984bd319be6be681</hash>
        <hash alg="SHA3-256">7649ba8a495192121a025b5e449cabb747765f2d946a32fbc86cac8ea6be96f1</hash>
        <hash alg="SHA3-512">48ea68d8f57f0d7462d036f26e68ebab0c03074671dc6bb2dd1f6a5b8598dc9e206d49e930a5845c23b122dc4623011638860bb17b4ad26a08bdd427987c4c7f</hash>
      </hashes>
      <licenses>
        <license>
          <name>Indiana University Extreme! Lab Software License</name>
          <url>https://raw.githubusercontent.com/x-stream/mxparser/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.github.x-stream/mxparser@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://x-stream.github.io/mxparser</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/x-stream/mxparser/actions?query=workflow%3A%22CI+with+Maven%22</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/x-stream/mxparser/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/x-stream/mxparser</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.11.0</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">32ed51f196dfda19e0dc1ce53eeed29e</hash>
        <hash alg="SHA-1">ac03ea606d13de04c2e4508227680faff151f491</hash>
        <hash alg="SHA-256">9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709</hash>
        <hash alg="SHA-512">4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420</hash>
        <hash alg="SHA-384">a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b</hash>
        <hash alg="SHA3-384">f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf</hash>
        <hash alg="SHA3-256">6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68</hash>
        <hash alg="SHA3-512">fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-beanutils.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.6</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe0ccbe8971fed954a0ad6528fe3ef24</hash>
        <hash alg="SHA-1">63e78ca6cd446c0ad166d14f03ed99e7efb3896d</hash>
        <hash alg="SHA-256">f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357</hash>
        <hash alg="SHA-512">5aaa082507e2f5031df7653e5feae7bda7a5fc4913e87ca5f7a202ee2d81e7b33c9f8d4419c4abe34f6dc56a0a85833340ae832f0630c23157ea6860c4273df5</hash>
        <hash alg="SHA-384">4b1d12ca87349e1dfa72ea6781d7107c446814f796805bdf20d251b14384e281c8b325aa7c833aede577570dd1aa1cd5</hash>
        <hash alg="SHA3-384">c3397f7065b350dff865a8ac054c995237d51bfb6e46d5a05c81ebfe77c897a0826eef3c6be63b95cacbd571754c6393</hash>
        <hash alg="SHA3-256">8954c3daddea14224e55ee21ca11e8c5a3454a9e12059de6429646108416f0f1</hash>
        <hash alg="SHA3-512">f7042e83035f90c56df777d894fd15689f6aee6eeb67b024687314eb4a33c75affe6840940dda4e2c88d690ed1679303d75071462444cae3b2b80fb425ac35d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-logging/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-logging</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.21.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c49977029838babaf8a71485aa9aaef8</hash>
        <hash alg="SHA-1">d95f998db5f89900fe895daf6cd2cddcb2f1d64b</hash>
        <hash alg="SHA-256">4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f</hash>
        <hash alg="SHA-512">3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a</hash>
        <hash alg="SHA-384">05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793</hash>
        <hash alg="SHA3-384">805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c</hash>
        <hash alg="SHA3-256">cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3</hash>
        <hash alg="SHA3-512">244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-codec/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.22.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f91d54bd47c42456b4a5ae62eed85565</hash>
        <hash alg="SHA-1">5b1e18bc0ad651ed878029d83f88d9c8189fd51e</hash>
        <hash alg="SHA-256">2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758</hash>
        <hash alg="SHA-512">fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5</hash>
        <hash alg="SHA-384">e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0</hash>
        <hash alg="SHA3-384">02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea</hash>
        <hash alg="SHA3-256">134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315</hash>
        <hash alg="SHA3-512">47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.22.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-io/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
        <hash alg="SHA3-384">4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74</hash>
        <hash alg="SHA3-256">b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629</hash>
        <hash alg="SHA3-512">2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/lang/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jenkins.tools/bridge-method-annotation@1.32?type=jar">
      <group>io.jenkins.tools</group>
      <name>bridge-method-annotation</name>
      <version>1.32</version>
      <description>Evolve your classes without breaking compatibility</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">99d6078ab3447fa00d8436209d33fbf8</hash>
        <hash alg="SHA-1">3059b8189c2c91460a163b7865cfb1560d5ba189</hash>
        <hash alg="SHA-256">dd189ab9e0f315aea0e5920de50e124831a5712ec7befe2b2fbf1588ec9a9a45</hash>
        <hash alg="SHA-512">56f45bc33b77302758f1b6cd152be90e37829b5bc97b6c520c7844d0ed24f4351db482538a18f2fa92b3c3ec2e13f0380dea03a74bf7925dbb047511be57f1f4</hash>
        <hash alg="SHA-384">5c3864b75d7aecca717d9fe495c6152fac9da486f97fc408d63e49262d55e61215cf5a18b91e04b6197027d2d23986ac</hash>
        <hash alg="SHA3-384">ac6aeb5fe54a7b2945ed51cee7140321e7430584f862ee849087d13f489ff40b2fef8a117a042147d1b0ae9ebe947b31</hash>
        <hash alg="SHA3-256">e7a5147b831b376b0acd23b5345b33db6c4fb922ee149842b5b8159723fcc65c</hash>
        <hash alg="SHA3-512">ac6c71d645dda6d759f742b5455584fa0c14e904cc3bb9667311ffd0a5369d2b2fa6e78c748e5e3d951e819087b3eb55c9036ecbe7e66902e93375db0c117818</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.jenkins.tools/bridge-method-annotation@1.32?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/bridge-method-injector/bridge-method-annotation</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/bridge-method-injector</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@2.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet.jsp.jstl</group>
      <name>jakarta.servlet.jsp.jstl-api</name>
      <version>2.0.0</version>
      <description>Jakarta Standard Tag Library API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cec3f1b94d7009385ba18f178a9883d1</hash>
        <hash alg="SHA-1">80e6440f16ae9e26e99f3c25cd31b41b477188ad</hash>
        <hash alg="SHA-256">70c0b4732e539b8cdf8189942416cd5759a951b3aef3ba5a2e3d4eee42ebb605</hash>
        <hash alg="SHA-512">c34d78693834e94a4cb081d6b0d4593ec70ec31caebd6e56375bfd94557be00af065c1940bfdef0203a6e9c964087e48413a039a0c3588c9f5205d9e8a690502</hash>
        <hash alg="SHA-384">6ff94c243df03e809b6a4c5622806ee0f40642c7d88429a4a3267038a2e9739e20c01916a4c2ae0fb22a9d354601f957</hash>
        <hash alg="SHA3-384">e81b92158fffd2484ee867c78ee26ff72b617026a43e1bbe11e246b8f31853179f1c80f03aa0fd6341194e9070f14e89</hash>
        <hash alg="SHA3-256">a4f6dbded6243c52d33de51bb7f872c1591ea8fba722ca0d4f12e04d373be0f9</hash>
        <hash alg="SHA3-512">73d63bfea0586897b96fd01a6627b1b6d2634dd14677bd76de15d26ddd9c67251f6d68ba049d3905d35304ff9c9f61c22f73420df5ba9132c322ea978f7db0ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jstl</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jstl-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jstl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jstl-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.1?type=jar">
      <publisher>The Jaxen Project</publisher>
      <group>jaxen</group>
      <name>jaxen</name>
      <version>2.0.1</version>
      <description>Jaxen is a universal XPath engine for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">54a1ccf4e7c253225100a25f042b3d8f</hash>
        <hash alg="SHA-1">53573094199cf53cf546455bc778accdb64495e0</hash>
        <hash alg="SHA-256">71d5c125bd1686de2f9ad8c95efbfb93896d39862cba2e69362d45112bc85d56</hash>
        <hash alg="SHA-512">af7b1b854a154c95b169a049f09dde9cadf3ec76df41f004c42493ca6b861e7ef31ba139e2aa59ac43c77e0a15fe7edf9b237fd62b6966e98b69aebc81622969</hash>
        <hash alg="SHA-384">a91a5402fc7494a88f3826e7d4df92baf64952d723976277aecf5a0cdd0cf6c019b2586d45682fd2fa0050803d3a3c1e</hash>
        <hash alg="SHA3-384">22b36bf5d8b69f8af2d0da16a5c08aa7b06804b07cd71d204970a61ac873d08137c21e3853c520326d4cfb5d8d4ddeed</hash>
        <hash alg="SHA3-256">72a3f4df9308ab8ad386f3941210cedd3ad5b5630966d6f79a0bb328cf1003eb</hash>
        <hash alg="SHA3-512">508b410bf9e878f74a1fa006ad466e5dc4af180d86ca4d4effac5171b7aa5f5ef38d4c0c458775293abec50cfaf251e3651cbd45c47d9ce9d568791709d20552</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD License 2.0</name>
          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/jaxen/jaxen@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jaxen-xpath.github.io/jaxen/jaxen/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jaxen-xpath/jaxen/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jaxen-xpath/jaxen/jaxen</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jline/jline@2.14.6?type=jar">
      <group>jline</group>
      <name>jline</name>
      <version>2.14.6</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">480423551649bc6980b43f09e4717272</hash>
        <hash alg="SHA-1">c3aeac59c022bdc497c8c48ed86fa50450e4896a</hash>
        <hash alg="SHA-256">97d1acaac82409be42e622d7a54d3ae9d08517e8aefdea3d2ba9791150c2f02d</hash>
        <hash alg="SHA-512">27f6e2523e539383cede51d8eae7e97d49038c5a66cb4a94a9ce85165f16e7382b937a238cdb0c92e1136af56c5f57bcc6c04435a370c5d49f7e4bd32f0d9194</hash>
        <hash alg="SHA-384">3ccd9d87500b42c743c91654b0f12d2e2c06a953eaf3d6acb07f2b9c2c861ffb8aaffdc5ed0aabefdc400f0d33944e00</hash>
        <hash alg="SHA3-384">68cff80ade4fbb8180d7e6c28088150a5be3d2fa1178fb25f14ec9a2c74451378c44b6326b5ec78627d6b22ef14af15f</hash>
        <hash alg="SHA3-256">cd69c13b1942eca5906ee8d780b72ac3a0b2f6e460c9d8b33f5504f233de9264</hash>
        <hash alg="SHA3-512">b3fcbc1ab0d65f5e6f3655c0f45e6b0fadbaec62160aa7f8199b9795c5938b14bf43bfe87093129ec63699b75102576a369ab2a7574a103efc6807c98d57f95b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jline/jline@2.14.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://nexus.sonatype.org/oss-repository-hosting.html/jline</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jline/jline2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/group/jline-users</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/jline/jline2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>5.18.1</version>
      <description>Java Native Access</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cb531ec131e1c68c045b5d45fe5b9878</hash>
        <hash alg="SHA-1">b27ba04287cc4abe769642fe8318d39fc89bf937</hash>
        <hash alg="SHA-256">260c4b1e22b1db9e110ee441c4f13ce115f841fa48c41d78750986214b395557</hash>
        <hash alg="SHA-512">e859aa7bf03225dacdd043c67f939e9250e3e223ef031a0cb67717974362e9df2bd1d9d704e7b52e7408230f01d816bab7ec1a745d9cf2feb26ebd8398026c7e</hash>
        <hash alg="SHA-384">58826bcb4171f8fc567f227eaeeac1a6dcc283b0585aa93696242852cb5f783568542d15bdaffa696eb4bac71de0673d</hash>
        <hash alg="SHA3-384">3069a01ddba11f6e23e1585d771ad3e01a82f5fb084f8802d147c1c8394f69f72e3a4ec4088019dda7065857dee68235</hash>
        <hash alg="SHA3-256">d7316b75c8eb5a04e07504766a495a4bda626622ec5bb0db1c700534c02abd78</hash>
        <hash alg="SHA3-512">f0d4346a86ea27e9e8a84ffb011c7dff6ecdd153c2cb7d7d0d1d7bfa2ea42a2dc6b6a92677db17e69fc80d27c509218e3c591ce5eae78d82fe6a8d844114a281</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-or-later</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/java-native-access/jna</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/java-native-access/jna</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.sezpoz/sezpoz@1.13?type=jar">
      <group>net.java.sezpoz</group>
      <name>sezpoz</name>
      <version>1.13</version>
      <description>SezPoz is a lightweight and simple-to-learn library that lets you perform modular service lookups.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f28b0ae5e0677aeb5d91a6811160cbcc</hash>
        <hash alg="SHA-1">822ac382900587d0a7d6aaec7b1859f1cf5de2fb</hash>
        <hash alg="SHA-256">3e0ebeab318e6c634b0ebc64e781b9ca63610b88b7ac09c0d185a313495748c9</hash>
        <hash alg="SHA-512">e6883b8a16902e281761f86629689d9a2cf7908fb7f397953f043c6aae5e2ee618162db870efdca6acc176f5407c4c1bbcd4e58a63e850476337cbc1d0a6ccd4</hash>
        <hash alg="SHA-384">b42f2ee308d3aa6680fddf928df05ea758fb3ecf70a18694e7d2277cfe47b488694c4fdc130e6033fe9dcf8291236af6</hash>
        <hash alg="SHA3-384">d362696b05d14913b997cb5d639ebbb098c47e12cd6f23ce6d75361e7a672ed064fdaa3f921112230bdd3692077b0040</hash>
        <hash alg="SHA3-256">538182b6dd5fda331dac30c4b22e98772f5a8f871ac2ead31783256852e2f551</hash>
        <hash alg="SHA3-512">df663133d69ff940e0ce10a277ee828a84300fb5529211111dc9e4b7c6b8e2bbba9a0a95022492a7f4004ae410dcf3ad0c38f3bb71b206a602befdd832d9005e</hash>
      </hashes>
      <licenses>
        <license>
          <name>CDDL or GPL 2 with Classpath Exception</name>
          <url>http://www.netbeans.org/cddl-gplv2.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.sezpoz/sezpoz@1.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jglick/sezpoz/sezpoz</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar">
      <group>net.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d5272954896c5a5d234f66b7372b17a</hash>
        <hash alg="SHA-1">afba4942caaeaf46aab0b976afd57cc7c181467e</hash>
        <hash alg="SHA-256">be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0</hash>
        <hash alg="SHA-512">cb312b3f571d91ef183c119d878f50464ffd97f853b7311cba386463f295e8b7b3a5a89ed4269a045cacd5aa7cb4c803d4882854a0fddefa9bbc28c72aa6c786</hash>
        <hash alg="SHA-384">20d12f4a68736b8df736b1de233baff5d8ac5d71b92a1ca10dc1eb61293ef88bd3cb434ab71e9027a6d303849e098f28</hash>
        <hash alg="SHA3-384">c8f2559f90cec25fae5d438059f6100294091315524e253cca0b1586497e4162b5c324ae25f5c4c0a91186092decf7cd</hash>
        <hash alg="SHA3-256">35970ea56e67fde943436fa5efd9f49e89c85dc863fe9ff868965d51e9be44c9</hash>
        <hash alg="SHA3-512">5e970df829d8f13436fe8a7b64bb0cbe4733e69789132ba60782a76d9377da3f5b044e9f47d731d8c5692548845e4d27bd1f8dedecf62357065324ce7f93c3a8</hash>
      </hashes>
      <purl>pkg:maven/net.jcip/jcip-annotations@1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jcip.net/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.13.2</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eecf1908f0cfff10f8bb82878b5ca401</hash>
        <hash alg="SHA-1">fc3db6d844df652a3d5db31c87fa12757f13691d</hash>
        <hash alg="SHA-256">dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7</hash>
        <hash alg="SHA-512">1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e</hash>
        <hash alg="SHA-384">f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0</hash>
        <hash alg="SHA3-384">322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0</hash>
        <hash alg="SHA3-256">2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618</hash>
        <hash alg="SHA3-512">a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.antlr.org/antlr4-runtime/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/antlr/antlr4/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant@1.10.17?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant</name>
      <version>1.10.17</version>
      <description>master POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7deb57aad47476c63e707ea57533e43b</hash>
        <hash alg="SHA-1">fa8a13422ac460563171d10a37c3f28340a953f6</hash>
        <hash alg="SHA-256">8be692e02837f41a47a3d21cde6655792142fdf42fe23bcb16d7129cad9b2284</hash>
        <hash alg="SHA-512">f1cc1a82e1abcf613d4ccf080f83fcd51acd7d4a2f1c2841cca90dd1ebaa96fab2df6411abd2cf97e2ec74231b1540a5d15c12117ba777ab1538b61f9f2b5fa9</hash>
        <hash alg="SHA-384">2af275805479b9cfcfdae25f19cce911922207bc2fb77c2c44caf8633c56cd7d772ab30134bac68aacf0ea6e444fa50c</hash>
        <hash alg="SHA3-384">71205d360f909df37fef5b427538c22977e01801108a1cb37387d1f72e784509796a915c2069a12762a78b990d0aa207</hash>
        <hash alg="SHA3-256">540a9cc40d8c9c4e004b04bd6af4a590e18d2077e93d441a9dcbdf90798b31b6</hash>
        <hash alg="SHA3-512">7a65837340a624a8f9eb68a56c78b6891ddf95cd617ccbc227e2fe88b53f59c2cea7d856b4d803898f2bb2317dbc8f8124d3c35154e3cee555d97fe064a8739d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant@1.10.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-launcher</name>
      <version>1.10.17</version>
      <description>master POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6f03c0937a15756fd7bc7bb98d6ee360</hash>
        <hash alg="SHA-1">a65884e1ff214f724a6e9c089365c71935c488e4</hash>
        <hash alg="SHA-256">f6e3de06dc0ea396638004f1a003f55fdbd20c3e7ccfb9b7a524f49fd0ae8568</hash>
        <hash alg="SHA-512">73fef113f238f6fcfe94e7d58824207ea6557626262f27d3bd20ab3bbba6af848ee5998ad915a7fa3999e0e368bb1f7ae1bf90888295989a15236a73c7d08709</hash>
        <hash alg="SHA-384">3cfaf78d72581170b94df32d7b069bab2e10fa8ae56d2973de3a750ec45aaeb194d89714dacc77af8f9892802a4a7ec6</hash>
        <hash alg="SHA3-384">447a649c728ffc652a3676904a3001e41cd10387dafe90df97fa121c8e824822a98a00b9a3de3cbd93b19355ad51d7a7</hash>
        <hash alg="SHA3-256">80ef280b77fd566dde6c6438a974f993db7540dc7a99ea89e43557df769a7f17</hash>
        <hash alg="SHA3-512">b9700c9f92513d503c806ed1ce2fed1d351a79f609ac8b30d4ec27580b0976d67cbecbe040647c7602f549f18ef8ac4fa37cc54d47a577e5046f0f86ff21de39</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ant.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Ant-Build-from-POMs/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nowhere.net/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ant-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/ant.git/ant-launcher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-core</name>
      <version>2.0.0-M5</version>
      <description>The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart
    file upload functionality to servlets, portlets, and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">000adbe4fbf2d84fb394eb8d1cd05121</hash>
        <hash alg="SHA-1">bfabb601638301c1b85891e4deaa2ae233a7138e</hash>
        <hash alg="SHA-256">f129b10b022a8072b1672069a49b34699877645bb2bdfe0a5cef819f788771ff</hash>
        <hash alg="SHA-512">56be7862a99b606a3a4cadd417f0d25dd6d699b4b065204e3745625bbc6afc9dad0f482b4a79f7dc9d347b335bc2ed813e5389e8ab3b8a9ecd5d572bed21fa6d</hash>
        <hash alg="SHA-384">bec80fa59c7d358ea3c4a0a44185c1829776e206e5ca43157c8aa64e2692f4f340ac877653ed7848827d373ee7820019</hash>
        <hash alg="SHA3-384">c277c1013dd0cf53224136664c9a74fa6eaf8af06b5caac352fd5433236bb5607ef400e72cd7998f4bba80ee185e4e87</hash>
        <hash alg="SHA3-256">49fae5ce2edc2677160f61f211ce618f350cc78ba576a082938469fcfd23e6f1</hash>
        <hash alg="SHA3-512">a3b261d38def44e6bff53f3360dfe14da81eb925505e2bcaad80c7b0cbe974219b33c6fdc61d2a68997e12a48c73c2a350ca420a25e90fd9736b3f62fd9daf82</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-fileupload/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-jakarta-servlet5</name>
      <version>2.0.0-M5</version>
      <description>The Apache Commons FileUpload Jakarta component provides a simple yet flexible means of adding support for multipart
    file upload functionality to Jakarta servlets and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eaf8867256a08153076dd62131221410</hash>
        <hash alg="SHA-1">587c1f43464a6de0222c2118c086510352df5f6d</hash>
        <hash alg="SHA-256">b22b571a1a17323fe577256272233e07fe155f263f3d03032b8a8fa3d2bd88cd</hash>
        <hash alg="SHA-512">f2c39a2360b6bb4bb27ff5de97d24fa87385da612c3621f07014b2acb85f70d2c626655f0b5e3ee7b1b738b48ab978b11253e4f42b24a5bec77e9755afe51644</hash>
        <hash alg="SHA-384">692243803be748e44d9c9858b3720ba3bcf3093b5933b80e1a89f0afc515c00c537c0f61ccc18d267c50fd8a2550403f</hash>
        <hash alg="SHA3-384">bfe0e1156dea752f84dfa0394cc886cfc3412db245a83c2fd4f79b8bfbb6e8cd0c813b266c8edc5dcf56c47e5be43da9</hash>
        <hash alg="SHA3-256">836b99b2faf4a7ffff56874d6784330ba34064524b37c093cd9af16d844eaefc</hash>
        <hash alg="SHA3-512">27087aa3fdf45ff27de517e75efbfde23308e741c9d9e27d443b6fb199d52ea3397275c837ba5b8d86bfff336269795cab37906883c3302f4fbe85536c26a10c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-jakarta-servlet5/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-fileupload/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-jakarta-servlet5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.groovy/groovy-all@2.4.21?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.codehaus.groovy</group>
      <name>groovy-all</name>
      <version>2.4.21</version>
      <description>Groovy: A powerful, dynamic language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f71b4448df32093864d36d13ff86e95c</hash>
        <hash alg="SHA-1">8e4f4c30dbb9123fbf703f256cd721bbac5c902a</hash>
        <hash alg="SHA-256">de65260cf2070442e99882f2f3d72e7531725c1e6a257446cc0cea525c607bd0</hash>
        <hash alg="SHA-512">8504b2b0c9d01deb27eb335de17bf339f65355963cc20a9b4ea5642da0cbea396106651688eda7c35f18b02898b96aa35395abe2c9de20100f142ffeb43461d0</hash>
        <hash alg="SHA-384">c5207cb799f69398003b6f49dcb2f5a7cdf59b29f89aa47d4e6b58012ec89f8f57f9ca0d02a34729763ce5778368b648</hash>
        <hash alg="SHA3-384">a5be9e6b4b55d409dff2c03d183462fa9b742c74214f46b83dc88fd66033188b75eedd8981ff862abae129c61d3eb61d</hash>
        <hash alg="SHA3-256">c901bc3899e86ded6101154054286bdfb5840c2d9b121764dbbe9b54a5a726b1</hash>
        <hash alg="SHA3-512">f2d91cbb7f24d006344f9559d71be4bb358388ca9a52d9b6aa36003c76cd8f017b696a00ae5b945fd407fe0deeefb27aa867db02bd9a5a10d9c0253fcd1aa6b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.groovy/groovy-all@2.4.21?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://groovy-lang.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/GROOVY</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/groovy-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/groovy.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.jansi/jansi@1.11?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.jansi</group>
      <name>jansi</name>
      <version>1.11</version>
      <description>Jansi is a java library for generating and interpreting ANSI escape sequences.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e8bd19df14afe8a0f4e2a44d57c0cd8b</hash>
        <hash alg="SHA-1">655c643309c2f45a56a747fda70e3fadf57e9f11</hash>
        <hash alg="SHA-256">9e82163ed2fc6257fe627132ce554726e796edee4e5efe9d9e523aee217d60b8</hash>
        <hash alg="SHA-512">5c3ec189edad1e409e9071e5076251d1f2cbea311c988a3c7e3dd65bfb03b496d56d2c85f7a6c015e4dc8af3119fd0e7e838f228079be66a6642e37b5d9628a7</hash>
        <hash alg="SHA-384">b342e5c5b9588bcd9343dca48db408cff33a305c5849421c33161d151a6d0d6e007e42fac4b57f026a8cd922c777a1e4</hash>
        <hash alg="SHA3-384">6c5ec34f4b20324f411327d7eac6eef158b782b62c0b28519e6e83d1cd54ed10870e0f116a82088b69fd5c327c564720</hash>
        <hash alg="SHA3-256">b1b9befa260cc36462fcf62a8e988297bd54f8a63877bdf9fd5d19dd51727205</hash>
        <hash alg="SHA3-512">62c230da7829289f72757ef8fa52e1710d3bab5f561f93f84e51dcf6c368f7d9c63338d8ec923eb163870a59eade3d5ce146276ea819773388d44b7f66cf9795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.jansi/jansi@1.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jansi.fusesource.org/jansi</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://fusesource.com/issues/browse/JANSI</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/jansi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar">
      <group>org.jenkins-ci</group>
      <name>annotation-indexer</name>
      <version>1.213.v92788b_1f0a_21</version>
      <description>Creates index of annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a5c68b26da4204195c37b647f2ae3051</hash>
        <hash alg="SHA-1">20c62c08b5646a37497e3007024e9f7186858422</hash>
        <hash alg="SHA-256">6bbc3a42a81dc38fa5bf3b1ceaa545b6d546b09a6928037aa91b4ead3cdd9ea0</hash>
        <hash alg="SHA-512">8895ef66cee19267eefeac4ef750f877068231ff52d681064f7aa63de1328daa627a7c70a4c3c3db2fa41094399dd76b44ee7c22531ee7456ff3dfab69e37757</hash>
        <hash alg="SHA-384">8b7669f29f0efa50d04e281e6d6a6337f0dd943d54f2d82a3710164881bc6355580111e1bb6412238b916c5e2775f144</hash>
        <hash alg="SHA3-384">0cad92cf1571a011cf3f184db2f44d14e2c7ef9ee68bfa23ea9edb8ff7c71076582231410508180f51c97c2dfbf22025</hash>
        <hash alg="SHA3-256">1296088c9b6a8c7d20e7602eef5f2f8795592a9ad60f7155f2743733a1f27fe6</hash>
        <hash alg="SHA3-512">5ea4ad81f313fd62799be989830eb3e8103b11c701ea658ba4cfad88d675bedca140b5e37c6b3f1fd4e71392e17f687dc5aa772e4d7d69d7381a3f8ecc4151f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-annotation-indexer</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-annotation-indexer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-fmt@1.1-jenkins-20260418?type=jar">
      <publisher>Jenkins</publisher>
      <group>org.jenkins-ci</group>
      <name>commons-jelly-tags-fmt</name>
      <version>1.1-jenkins-20260418</version>
      <description>The Jelly JSP Standard Tag Library (JSTL) for I18N and Formatting.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e09c857130b56fae9b385e5add91952</hash>
        <hash alg="SHA-1">344a492f86c45703905a830f104c192990f74845</hash>
        <hash alg="SHA-256">614d8f18fbcf366913eb414e5ad5de1f044fd7ce95f23e0768659209bb6b7288</hash>
        <hash alg="SHA-512">77432d47d52f7d46bfc8d17865601f80c509537c5168cfe7f3490fd4edcffd409b5ba8e331e434a4dcfa622667e23c7ddd492d0480308f48c471d43eee7b4023</hash>
        <hash alg="SHA-384">26c47b940f15382c820308e6c353b4b048619fec76daf951f1d34dbc5f1730bf6c975a41f79ad4fabab085393689ddf1</hash>
        <hash alg="SHA3-384">9ef7052c99962fe1f21798856f4cc3f95aa34f54ea3d1414a4af9103a324b6a8ebb162a2f8c7efe470dba9d9e1fc6f26</hash>
        <hash alg="SHA3-256">ddfdac257bb0fc3e1fdf65cd2d0a58fe952d49c2753578b9ff6d7848e784f7d1</hash>
        <hash alg="SHA3-512">cac19b634eebf1c4941d0bc9485e641040a72b529f006a9dff98ccd357919a78ee57bc62a9a32678d09e9dbfc1395bfdd6e952fbbe0049b5d21182f260c5904a</hash>
      </hashes>
      <purl>pkg:maven/org.jenkins-ci/commons-jelly-tags-fmt@1.1-jenkins-20260418?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jelly/commons-jelly-tags/commons-jelly-tags-fmt</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jelly</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar">
      <publisher>Jenkins</publisher>
      <group>org.jenkins-ci</group>
      <name>commons-jelly</name>
      <version>1.1-jenkins-20260418</version>
      <description>Apache Commons Jelly is a Java and XML based scripting engine. Jelly combines the best ideas from JSTL, Velocity, DVSL, Ant and Cocoon all together in a simple yet powerful scripting engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ac2210f1b4196d734a53be7bb20282bd</hash>
        <hash alg="SHA-1">4ef89d4b06c5480aca97458d0693dcbc69ffed8c</hash>
        <hash alg="SHA-256">8d07933bc7b0d5f9d9749097ff27d35682fe054d385c312164241c2bc4a29d01</hash>
        <hash alg="SHA-512">17b82747a50188fac873403f50b8c0e5a93d37fa26ae820507cd9b16dfc68eb45d44d26acab0ceebad6244ba0919b47830e7d239315d7751d50d87c7889864b4</hash>
        <hash alg="SHA-384">d053d9c4ed4a8bb17183bbf41f66a28566e361090c119f63fa4511f7d256131fc3ef26cea4cc861e327f43b75ee8b98d</hash>
        <hash alg="SHA3-384">04e3d2c2ef1685fb0c113dd218b57c20e09c1b18647c744ea88643c0a92bd0c4359dc829626a891b5d8779b31135d99c</hash>
        <hash alg="SHA3-256">66e99f003bc0d698d17da7657c3583a0c50b185b841e2dcc3e8e04ca7a44b719</hash>
        <hash alg="SHA3-512">01165cf3d85a50ec0e737c801b2847df9df5c8a3e6d4e913bce3ea39100a6bddf9ed910919971432fc97cee56babf3049aa2d5459a65bc245d7a0354fa12c138</hash>
      </hashes>
      <purl>pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jelly/commons-jelly</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jelly</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-xml@1.1-jenkins-20260418?type=jar">
      <publisher>Jenkins</publisher>
      <group>org.jenkins-ci</group>
      <name>commons-jelly-tags-xml</name>
      <version>1.1-jenkins-20260418</version>
      <description>The Jelly XML Tag Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c6eda6ee782258440b20282729f5801</hash>
        <hash alg="SHA-1">b676a9b8fc8ff2a951ed2b95cc2dfa81c26a737c</hash>
        <hash alg="SHA-256">cc6c4e2c9f35f3dbe7edcdae414f920b697dc1c4ea8053866e4fb0f7f6543c0b</hash>
        <hash alg="SHA-512">c863f4a366b27e90bdfa65b99c773156f6bad5d500654a9edb45ca5e463dba66ed1ebe504581a3ef497e14155fbf220e29f64b8dbc8554cc44faf484f9a37ace</hash>
        <hash alg="SHA-384">9af07adce28e340e8fffe978a9864ab230ec847f702e55f67470f74292ef7a5eb5a5d2908038d3034132534e06166f6a</hash>
        <hash alg="SHA3-384">8680d4af1dd544691cbbc50c5c94ef0ea22333cb39854afcff74f516593ada22ea1f8ee656d57d416934b0ce76af2b85</hash>
        <hash alg="SHA3-256">f0d4859407dd6bc67594b81e7fed4c72b6f4efe755899f89214953fb951d9992</hash>
        <hash alg="SHA3-512">2785430ddf723830a65778f0c9da9c8066742d299040862350f7d80105587d21f03a78be9a8355ab42b0d1cbb6125c1712a8ec889e4dc913cad2beb99f53b709</hash>
      </hashes>
      <purl>pkg:maven/org.jenkins-ci/commons-jelly-tags-xml@1.1-jenkins-20260418?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jelly/commons-jelly-tags/commons-jelly-tags-xml</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jelly</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/commons-jexl@1.1-jenkins-20111212?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.jenkins-ci</group>
      <name>commons-jexl</name>
      <version>1.1-jenkins-20111212</version>
      <description>Jexl is an implementation of the JSTL Expression Language with extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ac1813e9e680f10aa01e5bfa06a7f22</hash>
        <hash alg="SHA-1">0a990a77bea8c5a400d58a6f5d98122236300f7d</hash>
        <hash alg="SHA-256">3d1e5c11e50862187b13a267afaf14257276c4e311f35305630b3dd690e73eba</hash>
        <hash alg="SHA-512">ab029467d78857f8b1c39c8f88c46583fc2d22c772a44ff4d32313bf6498dfcee69a4a795acff64d4a99c6626535459a668bf050f67184ed2311de359afb3cc5</hash>
        <hash alg="SHA-384">6b8460fede85bc117de48427789040a97748e6a9463b7df5a6940507d301209f455cd8e08119a100e329cd2a5cdb33e4</hash>
        <hash alg="SHA3-384">8f3c4bec5e54c3e544466d27561bd704ee99731ecee9ca4a6c1b2400ec3877460437a5439c88fdd786fd3ff4d91bbc4d</hash>
        <hash alg="SHA3-256">4220ad76a5373da2f3c34f689e8977ba6642db0c032eb7218e98957add484692</hash>
        <hash alg="SHA3-512">861624b88a3bd0506fa4fb554aaf0669289224141f68ad921545af4b418ca43f92880de77982a290adbfd2936e84e512793a8fb504d221fb34f79eb191fb6c3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/commons-jexl@1.1-jenkins-20111212?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jakarta.apache.org/commons/jexl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://maven.jenkins-ci.org:8081/content/repositories/releases</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/crypto-util@1.11?type=jar">
      <group>org.jenkins-ci</group>
      <name>crypto-util</name>
      <version>1.11</version>
      <description>Standard Parent POM for non-plugin Jenkins components: core, libraries, etc.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">01d13390bd824f0546106bc70c4611af</hash>
        <hash alg="SHA-1">8b306fd2ad6560aef6fccffa831a64ebbd0fc8ae</hash>
        <hash alg="SHA-256">5da45e60a85fd4535c1b2c04492b4616180c70519dba6b3dbaee623a617670c1</hash>
        <hash alg="SHA-512">f729503288ad31a6bbd6e2eb99b00c3f6fb2c7d6600749776f4032264a2349dfc6d8d63fbeb829a6801bf0f45de97c186ccdab63f7beedf86db83c60b3d9b060</hash>
        <hash alg="SHA-384">18fce42db3e71efaf8f07b8d7a6b6941d7d91a6d7cbcb532809118b0f548ec69da4c28f9231ee98286c2a72f27d36aea</hash>
        <hash alg="SHA3-384">59995228f86ddabd6000c7ee104620406fee3271b5eeea9fcf4135b92bbc146b487a980131691b2e557a91c4cf8fcfb5</hash>
        <hash alg="SHA3-256">b7e8adeb87a175209e6cca7e3e43b35ab684f61dcffc3b990fa4f9291a6fcf92</hash>
        <hash alg="SHA3-512">37a3d4b14a0dae5bae9660f2824734c5016c4475fef4d3ed3be84b930d969b5273e6c5ab9a87ada82f3b620539adf5d918f2b0b0273fe76c754cc9f085b864bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/crypto-util@1.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-crypto-util</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-crypto-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/memory-monitor@1.13?type=jar">
      <group>org.jenkins-ci</group>
      <name>memory-monitor</name>
      <version>1.13</version>
      <description>Code for monitoring memory/swap usage</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e5bc59e70b87e41adde0b47a16a4c964</hash>
        <hash alg="SHA-1">8f8e25f6c56f486aa36f38a7ea3c8f4b678680cf</hash>
        <hash alg="SHA-256">e18b7922271226bf5401708b4253a66b0cff120eadf85fa15f404005e1636297</hash>
        <hash alg="SHA-512">aa5bb67e31f060379e29a8bcc92bfc707491a577eb60292adedf7d9d3865713c49abbe3f141a64087ab92fd7bb2ea9e631025f9ab9cef56eb563d2129a82ae10</hash>
        <hash alg="SHA-384">7b296b477d4011b3cc59128425b4a9cb91f9f1cfe00faf1ce717c0ed6857a48fda091fd4766bebf0907a32dc09a2404a</hash>
        <hash alg="SHA3-384">e2cb7d26f843cb288f2c6ca85afb0ec6a2ad3f441ef240ec452e8554e73d23a849bc17aa21b00236d79fc109e2072b09</hash>
        <hash alg="SHA3-256">2870f4e5f4ff5ff6d227f65d6f41cce53b338875444e2bb8b11d7e1601132df3</hash>
        <hash alg="SHA3-512">bfb9110e4f57af5ecf0fc4813c6befe4d96798f197d9c26a33a6a7fe66ad2b36d33d2ec1c469ecaee56c429b52d27f4d51045b648e4a6cad72b5a8ad7fed3724</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/memory-monitor@1.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/extras-memory-monitor</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/extras-memory-monitor</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/symbol-annotation@1.26?type=jar">
      <group>org.jenkins-ci</group>
      <name>symbol-annotation</name>
      <version>1.26</version>
      <description>Standard Parent POM for non-plugin Jenkins components: core, libraries, etc.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e1921e00c3d64191a1548e19ebc6acc</hash>
        <hash alg="SHA-1">883f560e69f1a46de405d1d404665222b9ae1f0a</hash>
        <hash alg="SHA-256">ba0e72a4ca6403f2136cfece5a263841a34299f80642366f68fb0e5a80edb66d</hash>
        <hash alg="SHA-512">027f0bbdbf0c5b83a66c35796762e382a1989d5689b9637fb9ac18cae995bcb1dbec48969a513da03efaa5da1320a0722ae0e618593e6fbec205a8e02b8002d9</hash>
        <hash alg="SHA-384">a6b24136833c53366793d3d4c8518be69487398a0be4ce6207bf30ba98f81b214866f42c49485e9ef1315432a14fe130</hash>
        <hash alg="SHA3-384">05d97fd1110eb42e640387683d09abdda3b5d9464e4d16e9109fb6b170664aa75537ec83e5ba9773ff0af08adfad7c3e</hash>
        <hash alg="SHA3-256">0b4b2b269713983d775e5ee004fe277df0ca6f9713ccc264753a0a9e7dc1862e</hash>
        <hash alg="SHA3-512">252aa38e5524cd4a1a7a4f736839f0b12880c2756c4b5c55c5de1430435e9dec0a69953c4dbbc6c207c0461322ba7a1dc2c5bc43be7e4847d27d5cd9f33ddb8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/symbol-annotation@1.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-symbol-annotation</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-symbol-annotation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/task-reactor@1.10?type=jar">
      <group>org.jenkins-ci</group>
      <name>task-reactor</name>
      <version>1.10</version>
      <description>Standard Parent POM for non-plugin Jenkins components: core, libraries, etc.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1705f329b40d2869a971abbfc58c022</hash>
        <hash alg="SHA-1">9bbc0f6fc23410350759340391a3eaa9891889ed</hash>
        <hash alg="SHA-256">de4bb5d1e6e4c82d54aff73fb2c6b3244b4f3b679c75c6069b43804d287859b3</hash>
        <hash alg="SHA-512">6fec3551794e8f8dba8b166a9a87f71761f8223a4e73139cae1ca0f622eea5d5ae347d8501e50e482095e6b66cf473a18f3f996374b1dcc89a463e9013556493</hash>
        <hash alg="SHA-384">635946f3a0ab217fa331717caa665be7f81903f71e9b9678271dc8f90f3d6cff8a0506dd77b2b26c8e03dfc2191a177b</hash>
        <hash alg="SHA3-384">1ab5d17abb37a9fb092b4126d5b5c86135f5f4f23d2b1337934356c7a3a5a6614a2d99c9845a856c999fb4ef4dbb0178</hash>
        <hash alg="SHA3-256">a351e6a48b53b4948ea3d4faf8c4c20af18d3dcdbad54a255421f846b00394ba</hash>
        <hash alg="SHA3-512">2cf4b83300ea03f8c382caba7bbf674f89aaca5871a02b44a413977de0ecfd5765d9a6a750c6933a8d2adf98fc473f73a71e6e574103d588864badd4251bac26</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/task-reactor@1.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-task-reactor</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-task-reactor</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci/version-number@1.14?type=jar">
      <group>org.jenkins-ci</group>
      <name>version-number</name>
      <version>1.14</version>
      <description>Offers API classes for parsing and comparing version numbers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">487fd3ed394ddc7f02e6487b31668d40</hash>
        <hash alg="SHA-1">2b160e3748d92f6b393d87d9d550afed80d9cb5b</hash>
        <hash alg="SHA-256">af8e5c6a96c13f39a4c8d0d5b5253828c4f70f919b15928b73acd0e7b119277a</hash>
        <hash alg="SHA-512">45c8e5fda0e9e7ce5b133fc5261accb8cd99943b3f8ed6ce5170d254137d5e89949f8249586bc7edb79582914f74e6e0d75ab926ba59a5148c50d44802c5bdbc</hash>
        <hash alg="SHA-384">c322f3f74262f938d1d7bb401636de7d327a070b8ad822a5afddc085d2e05f2602cc77f6762ecc5b88a54a650fdbd059</hash>
        <hash alg="SHA3-384">ba2022fdab70b0c4c4c319b53d33f9a539c860a27a61fb56fe8136092b751844481eee01464dc5019b76cab2bccf232e</hash>
        <hash alg="SHA3-256">215fcda9dd4ac9564dfa5c41d0884131aabb6ead57f5e00b6fa07ebc9ebfd557</hash>
        <hash alg="SHA3-512">c3e797deb6c1d7d66047be00b6dd3a99666b38047018c6b3a7168844202c18194c56611edccf439c1f168ce910d7753688b50db9eea93c2b8e03fe2da04f63c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci/version-number@1.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-version-number</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-version-number</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/websocket-spi@2.562-rc38227.49626ca_f6f50?type=jar">
      <group>org.jenkins-ci.main</group>
      <name>websocket-spi</name>
      <version>2.562-rc38227.49626ca_f6f50</version>
      <description>An abstraction of how Jenkins can serve a WebSocket connection from its servlet container.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41a32bcd01427f2a264747680619a2e7</hash>
        <hash alg="SHA-1">8277ee7828b4b49755ed4509e666be17dbcb4874</hash>
        <hash alg="SHA-256">8e720738a9fc807e3d95ee2b75948e4813cc77804e4050a54598df305d6d1277</hash>
        <hash alg="SHA-512">4b3206f4c5b3ce35de6e911c929de5297b042aede44b3c62e45d95abbc6bbc254723c62c7dbad2ccceaf853b2b6783057ebd3d196ab4006cbe7d98a384b3da52</hash>
        <hash alg="SHA-384">35ed744d5959dec6577ddfcc4293574fed8814c66e3912ba06820ef502c685991fefd86b06e8ad257a572c90fdd84b33</hash>
        <hash alg="SHA3-384">2bc8ded1417b0a4ac87855c1898d1aed3a29ac13bca040b9d7a5652c39b6d02108fd1506ff64bda5987086eb84db88b5</hash>
        <hash alg="SHA3-256">0e81f4d40c07c2d05f4e545d56ff63c9c3cd73494dd3a336a553f74df6ef8f8e</hash>
        <hash alg="SHA3-512">92136b861fcec951600acef73c0a428663e4cbb5db49c0be8dece21993824eee9a28ef497fca633bec7de8bb7ec9617ac450420865cd872beda2cde1de94fbbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/websocket-spi@2.562-rc38227.49626ca_f6f50?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jenkins/websocket/websocket-spi</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jenkinsci/jenkins/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jfree/jfreechart@1.0.19?type=jar">
      <publisher>JFree.org</publisher>
      <group>org.jfree</group>
      <name>jfreechart</name>
      <version>1.0.19</version>
      <description>JFreeChart is a class library, written in Java, for generating charts. 
    Utilising the Java2D APIs, it currently supports bar charts, pie charts, 
    line charts, XY-plots and time series plots.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ff3762bd04a7239cfb98de542134bec</hash>
        <hash alg="SHA-1">ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20</hash>
        <hash alg="SHA-256">153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263</hash>
        <hash alg="SHA-512">4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd</hash>
        <hash alg="SHA-384">dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549</hash>
        <hash alg="SHA3-384">0a60de6e3640d63ec6d5fd98a1ddc3e3829ef4b20bd9a236ff7055968ffd826b1c92fbcfefa16ed3a2ce82622e168a9a</hash>
        <hash alg="SHA3-256">ff29553d392a5f5e3d56fb495c3d4829adb08aeb4a11e5c11a9b3dc12aa47ffb</hash>
        <hash alg="SHA3-512">1f244620552183a5abae81b5a4f6a8a465f9165fa23d273aad01bfde1c1cd7c0fbb21a2f60e26d5ba057ed29115bc274af6bc5cedc90560c5b239ab017accaef</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU Lesser General Public Licence</name>
          <url>http://www.gnu.org/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jfree/jfreechart@1.0.19?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jfree.org/jfreechart/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://sourceforge.net/tracker/?group_id=15494</url>
        </reference>
        <reference type="mailing-list">
          <url>http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev</url>
        </reference>
        <reference type="vcs">
          <url>http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jfree/jcommon@1.0.23?type=jar">
      <publisher>JFree.org</publisher>
      <group>org.jfree</group>
      <name>jcommon</name>
      <version>1.0.23</version>
      <description>JCommon is a free general purpose Java class library that is used in
    several projects at www.jfree.org, including JFreeChart and
    JFreeReport.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b059adc60fef2da40b7130f9a67f977</hash>
        <hash alg="SHA-1">a316f336ca996e0c6bec4e4fbd49be8f5e1c3968</hash>
        <hash alg="SHA-256">1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c</hash>
        <hash alg="SHA-512">f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44</hash>
        <hash alg="SHA-384">72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00</hash>
        <hash alg="SHA3-384">c0b2735bd3e247210e15e7b907f014d65208c2e4b4c9af2c7617befc01aa160906d4a2c3e3251162d004e7f2fff232e6</hash>
        <hash alg="SHA3-256">c08d3478dc33b5df4ca75e86c746b2c857a3c60eac854c66cb11d16725b13c1b</hash>
        <hash alg="SHA3-512">e5ee3b35a3155a01825a58e8c3107403e40c565cf21484a058e184eec72ea415dc750d594aea5bfdd61721ceba4e34fc52fc3e5c76159e3d34c69e7bbe039932</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU Lesser General Public Licence</name>
          <url>http://www.gnu.org/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jfree/jcommon@1.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jfree.org/jcommon/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://sourceforge.net/tracker/?group_id=15494</url>
        </reference>
        <reference type="mailing-list">
          <url>http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev</url>
        </reference>
        <reference type="vcs">
          <url>http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.hudson/commons-jelly-tags-define@1.1-jenkins-20260418?type=jar">
      <publisher>Jenkins</publisher>
      <group>org.jvnet.hudson</group>
      <name>commons-jelly-tags-define</name>
      <version>1.1-jenkins-20260418</version>
      <description>The Jelly Define Tag Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">675a29d5281c0a4ed263201f97fd0d0c</hash>
        <hash alg="SHA-1">ca6d568b66bcf1978072eb95667f3d830f0c21db</hash>
        <hash alg="SHA-256">74915cf928021e96902045fbc5c7f7a0a742d93660aac95794bc09f2aa0da1cb</hash>
        <hash alg="SHA-512">dcdfc13ad6c59fe70048fc6539e68a5848b94bc85417d548063473011e0aaf210ee8c4e2ea46eed66cb5b5d3ad6e1ee374ba4af11d4c5a049372e3057082b71b</hash>
        <hash alg="SHA-384">6a117e4117a1bde131d9d0d69b64e8ec2571efd26e89c4bf7bffab6ab3131b8a18bf065343087da19b6955bd68f40131</hash>
        <hash alg="SHA3-384">3dcdcea35bab16024dc4fabcd2f5f2712e861333aca77b4ab9cd13fb71c53ce0b18aad7c24f825cfaf5c088b2d6d51aa</hash>
        <hash alg="SHA3-256">732221212f9922cea1e735393cd6cb1a8be1118fe4d54592d06287a0f69641ce</hash>
        <hash alg="SHA3-512">6bfd2210071bc24e77589b138117739d83f7fa57ddc6db792ca44590193f709ea4428873ef063bfcc2e49d477d12054e4dcf1693497af0b76040fad1f78901b8</hash>
      </hashes>
      <purl>pkg:maven/org.jvnet.hudson/commons-jelly-tags-define@1.1-jenkins-20260418?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jelly/commons-jelly-tags/commons-jelly-tags-define</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jelly</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.localizer/localizer@1.31?type=jar">
      <group>org.jvnet.localizer</group>
      <name>localizer</name>
      <version>1.31</version>
      <description>Localizer</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b5f11e703bb07b4f23522b097fef2d7</hash>
        <hash alg="SHA-1">aa7560693502015b7747697fa5a4fd1da9a95ccd</hash>
        <hash alg="SHA-256">160665408a2e2684ee4527d2efbe5dcb193d2e017010b35a74182cd319f2c5fe</hash>
        <hash alg="SHA-512">01f36e752a409b84a91f516b77b07606126aad169c931ecf1b954c0a360706a5206ac6c3c591cdb3c849533e3cb06c8b2e9477caf5348e8de42b8538608319b4</hash>
        <hash alg="SHA-384">51d10bff9b48f640b1af525c4c38b04841fcbf892f07f959049d4fd5f968f411db26c11321ff411a02cb67c041d10340</hash>
        <hash alg="SHA3-384">3300f1f5eb3d8144e8dd836bf61b017455f6ab5a8804a5baa8ac45308cbb937b56b44c70dec4d878977d55c8e801c1df</hash>
        <hash alg="SHA3-256">8f4e2713b0ae07720a32db6dc8fe162ae9ab9c24bef7a3608ec1aba6dced5b12</hash>
        <hash alg="SHA3-512">eeb3f0c7746aa5bee5c6119638a98ea5b37bd2a909bf1f9c0375719a8b57082596c126af7d3e04f1dc4c3f4e255db9aa895f44d59bb12b0c79e515c4febd0e0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jvnet.localizer/localizer@1.31?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://kohsuke.org/localizer-parent/localizer/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://localizer.kohsuke.org/localizer-parent/localizer/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.winp/winp@1.31?type=jar">
      <group>org.jvnet.winp</group>
      <name>winp</name>
      <version>1.31</version>
      <description>Kill process tree in Windows</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ac16172ed8cbbe2698bd087f825d249</hash>
        <hash alg="SHA-1">f68b7f4d85539c43fec38b88918fca831f946b71</hash>
        <hash alg="SHA-256">2d568414dc618882873dcb303a209431177810a680eca5fec684864dab9ec3f9</hash>
        <hash alg="SHA-512">91d7c4456fef46370dc422aee5ba34314da54acda9f5671e0f9b028ff090167c4c26513bad01f8003dedcb627652738e466afc074a6e80f7bf1c69d2719c87c6</hash>
        <hash alg="SHA-384">e91f42c303b7951f52691584310e5db2d9cb18da09c70da6a6ca6d44ce76958bd5165a2a2d919fdf4c049073b7d9ee34</hash>
        <hash alg="SHA3-384">748d86530a526e6820160094d00f7ac2fb6b4f03aec14042fd394b4e21cd713e4659248c8be6d01c6958ad05e7f0efc6</hash>
        <hash alg="SHA3-256">39f49c9ef10fb0ec979713d931697ff813216ba9e165a04dc091bbd9d25768b0</hash>
        <hash alg="SHA3-512">0c9b1eeee12f190e8de546a3e8643c32ed1bbc8866df8594f4980bee629e68b2456bc97f2d6889394f841a0083152c153d35ef347f0e36bb85b78f0c8b4e6606</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jvnet.winp/winp@1.31?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/winp</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/winp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke/access-modifier-annotation@1.35?type=jar">
      <group>org.kohsuke</group>
      <name>access-modifier-annotation</name>
      <version>1.35</version>
      <description>Extensible application-specific access modifiers for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d565c559062eff403fa9cb8af46e0216</hash>
        <hash alg="SHA-1">b6e4efcc7e7b80014b5245e29aba3c8ea4d61af8</hash>
        <hash alg="SHA-256">abb2ed3f74be3fca01a9796d2b4ef79a93da4ec52b6cb72ee893bfd00b96e281</hash>
        <hash alg="SHA-512">31ac60368996ad9d51a4b91a4a3af475d947a87f03f293650b7b35dfbdd998cb667e32ba5152af450652bdfa125e01333dceecf1f9f53513ff3cb4c6de7fc72a</hash>
        <hash alg="SHA-384">191045cbb0fd9c3e5ff3c1c7c09bfd6b335d235fa529e97687db3a377c59c7724e58bfdd4c4ff6c351475c66362c7ba6</hash>
        <hash alg="SHA3-384">1e605f335e99a0b3cfaf3d6812034a762f3d326d019361aee7f8573b8c40d5bb51ec272c20541463da61110be87f7000</hash>
        <hash alg="SHA3-256">cbd6fde8c525aa7f36765a1eb2cdb45cf7544f3e8c14d7b604fafa35d3acd6c5</hash>
        <hash alg="SHA3-512">669de8d5654e34197926332d5d0df07423cefc2f8488634ca1c706f1971b710d90fa64a58307182827ba4b31454afbba66a673519cfac790f0bc6c30c97de911</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke/access-modifier-annotation@1.35?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/lib-access-modifier/access-modifier-annotation</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jenkins.io</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/lib-access-modifier</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke/windows-package-checker@1.2?type=jar">
      <group>org.kohsuke</group>
      <name>windows-package-checker</name>
      <version>1.2</version>
      <description>windows-package-checker</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d940ebb88b630260d295bb50246c3553</hash>
        <hash alg="SHA-1">86b5d2f9023633808d65dbcfdfd50dc5ad3ca31f</hash>
        <hash alg="SHA-256">602f868ff050409f9cd5e9ced3a53c44f8ac7faca105b66d40a47dcc76f5a68f</hash>
        <hash alg="SHA-512">c6384dae3233ab54e79207ab35156ac1b2c646dc280dac12a49b0033339f133303fbec3168fc152ff9f3c56cbdd317af82cf7dbd27cb56e24ed7babd93dccfe6</hash>
        <hash alg="SHA-384">0236f6d7b300093eeac51992fb1df6fdf7144e952e04367a23f78e3678ceba78171ffdb69597d0d67fa09b548454b591</hash>
        <hash alg="SHA3-384">7ccdede0ba45dee0f407826b1a1ac5f4787898698dc40ee570148af9abb11f1bddfad2e2c5dd4a0fa28f415195daa374</hash>
        <hash alg="SHA3-256">738b11740cff00b75c55423130a0fb5c852772339accaf1d031068955e81ac90</hash>
        <hash alg="SHA3-512">34b00266da4851ee5bbc1c94ee89cc54d01998ed435dc19edd28f7a89cef95e12bb2a9176b427d36053cb8053d1eec586b8bba1cccd06ba0b9666ada65dbf719</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke/windows-package-checker@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://kohsuke.org/windows-package-checker/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://windows-package-checker.kohsuke.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke.stapler/json-lib@2.4-jenkins-15?type=jar">
      <publisher>Json-lib</publisher>
      <group>org.kohsuke.stapler</group>
      <name>json-lib</name>
      <version>2.4-jenkins-15</version>
      <description>Java library for transforming beans, maps, collections, java arrays and XML to JSON.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52bc368b2c376941e656f4408b3c4062</hash>
        <hash alg="SHA-1">e07226ed11bbd77618c2a258549759931438ac74</hash>
        <hash alg="SHA-256">c0c79fe5df3d0ecdcdf38a707358f1458d25b146111de16e36c21513b4e75a54</hash>
        <hash alg="SHA-512">56bcff78865575b809a830806102d06181a52f5726b565457a84f4220ec0555a2b234bcd78e2dd14af91b2870ad69ff1a3367cac2a2868ac212216f9bcd6117d</hash>
        <hash alg="SHA-384">d17ecf52baa12ba27facc40508f4b3df66901ba789897714077465ca8b14b8588f9aef2998f34712c7d4f78c82d70b17</hash>
        <hash alg="SHA3-384">acb49ed5960a9d6d8553b3b5ec82ee01ea1279f09dfc4aa00a6e0424fe975a8ebadee852583985086ede66664af9b350</hash>
        <hash alg="SHA3-256">499f3c8de9771c70a0d213e98ea721a67874ce686cd0832e7e85274df9c632d7</hash>
        <hash alg="SHA3-512">3cfe0eb00027e7d91de30d7c7bdfee8e83b692e079f4659d880e274d3ddc74bc39ebecfb1d4b1dee7fb37d1aa41e222a93eb0beeae2b9a4da9ab1f290a8c4df3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke.stapler/json-lib@2.4-jenkins-15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://json-lib.sourceforge.net</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://sourceforge.net/tracker/?group_id=171425</url>
        </reference>
        <reference type="mailing-list">
          <url>https://sourceforge.net/mailarchive/forum.php?forum=json-lib-user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/json-lib</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar">
      <group>org.kohsuke.stapler</group>
      <name>stapler</name>
      <version>2083.vdca_dc45fdb_0c</version>
      <description>Stapler HTTP request handling engine</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ce45a69f11a7df81962dc79b535a488</hash>
        <hash alg="SHA-1">e55cde96c92eadda4e57dc879e4a70063776421a</hash>
        <hash alg="SHA-256">eaa923cac0f9221cffab191d2760504cc8cfc12c3e910d71a76378126187d3b2</hash>
        <hash alg="SHA-512">23eefd10e071658a42a205c6661a11f3392306014c5e07c12513ac2baba81e043abd19f626de8ee91f164aad64ce9019e9218e024db6b75be19e321fbccca4e4</hash>
        <hash alg="SHA-384">553adb3daf77e8f28353e9a0fd566b459620cf8f9cf235cbd9e4ad262edeea18ba70488ad59db34bf22b4c29af215ca4</hash>
        <hash alg="SHA3-384">a9297a2f3172ba03e8c7d135df0f435cb6cbe38b917faad38e3cc111e369ad3d9ddbfafe3ae302d33064e7098d777ed5</hash>
        <hash alg="SHA3-256">5bbe8787dfaa933936292a968d9512f8d8702b00c14c2bd46120d69a8b2449d8</hash>
        <hash alg="SHA3-512">81e4bb79883e362df749ef0d541e5e46c51f379fe43e8eed61d6a75a8add418dfca04d21e17df936c13c93c0a91300417ebcd7f79f425da0089a63fca0f81a5b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/stapler/stapler</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/stapler</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>3.0.0</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7faffaab962918da4cf5ddfd76609dd2</hash>
        <hash alg="SHA-1">54f928fadec906a99d558536756d171917b9d936</hash>
        <hash alg="SHA-256">b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2</hash>
        <hash alg="SHA-512">2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d</hash>
        <hash alg="SHA-384">1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99</hash>
        <hash alg="SHA3-384">a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9</hash>
        <hash alg="SHA3-256">6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12</hash>
        <hash alg="SHA3-512">52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jcp.org/en/jsr/detail?id=250</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/javaee/javax.annotation/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>javaee-spec@javaee.groups.io</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/javaee/javax.annotation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.9?type=jar">
      <publisher>Eclipse Jetty</publisher>
      <group>org.eclipse.jetty.toolchain</group>
      <name>jetty-servlet-api</name>
      <version>4.0.9</version>
      <description>The Eclipse Jetty Parent</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1726c1ac4398680da79bb5a9b8a03120</hash>
        <hash alg="SHA-1">e420683c1c3eae740461eb45cfea6ae7b3149511</hash>
        <hash alg="SHA-256">89916c0360ad8be8b0b6bab41d9f0d5d03b742abb5e13aeeac06817c14fdf037</hash>
        <hash alg="SHA-512">2fefd3767762eb3ed7139192abeafefeeb51ce73245625cc53ff62dc4c2c2fc4cb0b7df8895d6ef817201db695538a38b33d4cad92a6a7892ef186a1e00fd813</hash>
        <hash alg="SHA-384">be5a04f812f7e8f0c1ed36fe5d5333b9af0f822566604d62c76e3da9266da6511ab4a6896d1870fd46aeacb09706e40f</hash>
        <hash alg="SHA3-384">1d0141a44a83f75dc80ceb589ada171354f1224d9a61807ad4a432d08b5ec95111ada0d0ac9d79ed04f430502f012792</hash>
        <hash alg="SHA3-256">b62019ca923ad43c724812af1ac82a42fbbb5896fe8454b894d2db992a2a6eef</hash>
        <hash alg="SHA3-512">97e886fb04cdbff2b40a47106933697813e8e6e293857340133e849903691b807f1b640a9787610d434d8fa9d87848a8be1464947c8e93c86a60a67c43c290f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.org/jetty/jetty-servlet-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.parent</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty-servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet/tiger-types@2.2?type=jar">
      <group>org.jvnet</group>
      <name>tiger-types</name>
      <version>2.2</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dcc9eb485a88b85473fc70752a4a8473</hash>
        <hash alg="SHA-1">7ddc6bbc8ca59be8879d3a943bf77517ec190f39</hash>
        <hash alg="SHA-256">37af58e5972b3a6678f0dca5932fae99cbe12c73f00f35b939c2ac27e791034c</hash>
        <hash alg="SHA-512">bcc0dc771e3037ccb58815825e4076c003c168e64e8fe7851289d2890a7f25cee5cb36726c4f6b9e1a289bda1b473a4af31c77a5f1703d4c3c5cdd7218756ab3</hash>
        <hash alg="SHA-384">fc9a4ac7110c3a396e0b08e1dfe9cc5ff8ef23d47ea908b7bece202277ae72487b8a50a50805c0a258c55e0b9eff8ce8</hash>
        <hash alg="SHA3-384">42f836ce2a0194f44328d59b7823b3d6f48d227463616114f9a1bc30c0c2e9ea52b84c868eeef0532eb6a0ebf1822fe0</hash>
        <hash alg="SHA3-256">edb771770a2580f98b1cfd04781d8de97cd27c1b92d9729681134624425b56f5</hash>
        <hash alg="SHA3-512">5cbde917c9c53dc4695ce2b5184579b0a3a15ff75043afd2c2333f01a03a3b17f97e5777770f7fa49fba462fa83a969293656e19e1c253e6e1213f9f953b61d9</hash>
      </hashes>
      <licenses>
        <license>
          <name>CDDL/GPLv2 dual license</name>
          <url>http://www.opensource.org/licenses/cddl1.php</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jvnet/tiger-types@2.2?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>http://maven.jenkins-ci.org:8081/content/repositories/releases</url>
        </reference>
        <reference type="vcs">
          <url>http://tiger-types.kohsuke.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke.stapler/stapler-adjunct-codemirror@1.3?type=jar">
      <group>org.kohsuke.stapler</group>
      <name>stapler-adjunct-codemirror</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ebb241efd642d6985b89d56b8d640c8</hash>
        <hash alg="SHA-1">fd1d45544400d2a4da6dfee9e60edd4ec3368806</hash>
        <hash alg="SHA-256">86805045ff832db5dd30bce3a3303c8004d2373a495556a06a61bc107518d7cc</hash>
        <hash alg="SHA-512">832d72486e4f76fddb3f82f067a686eb692b9495a1381d135903c85243ea19e0aff969df44e3347c37921340c903dd20affd81e3fa4b99eb1a2e3da2e5077d3a</hash>
        <hash alg="SHA-384">5519abc93d6efa5cf37bb17d7439b26e0abb899428a316c0cebcd0d96be319209b5272d39b450a24a0ca33d1e28e5771</hash>
        <hash alg="SHA3-384">3b8babefe10cc65772845c3160e0bc27dde2ba7b2c16280b74d03e48352459ec08ea668c52cf9749691c2b40915efa43</hash>
        <hash alg="SHA3-256">9acaf14a240da9bcc77b7d1b64454b21680f17d7e503963e5e292b26f458b35f</hash>
        <hash alg="SHA3-512">847033bb7a91df8c93ed2900e9190e177cfb5b893355f3bb2e537e8338fa148b3d74803b1ac382399a63fc2719bab95b350a32a5649409ab76c2b43024aeccee</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke.stapler/stapler-adjunct-codemirror@1.3?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>http://maven.jenkins-ci.org:8081/content/repositories/releases/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/stapler/stapler-adjunct-codemirror</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke.stapler/stapler-groovy@2083.vdca_dc45fdb_0c?type=jar">
      <group>org.kohsuke.stapler</group>
      <name>stapler-groovy</name>
      <version>2083.vdca_dc45fdb_0c</version>
      <description>Groovy binding for Stapler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f280b7739f5b0932905afe6126b7e17f</hash>
        <hash alg="SHA-1">184f383acb30a0b31c6aadf1ecbaa28eee2416a4</hash>
        <hash alg="SHA-256">ce0d95586ae3ed6174654af533e56d84659e2ca8589986414905e5fc190359b7</hash>
        <hash alg="SHA-512">5714aee7ce4baafc934c7c7edde0a2534d984b58bd6675d730c6e0a4b841ec4afb0fbd1588f1597c716e71ad474c6af0b6d6d4450576dd42b0d9eb8e0509557e</hash>
        <hash alg="SHA-384">ee2bd98a16203231438f3baa5fc97c172382313e1b903100105e44f8817111701a430699802cdd8addacf6c9205d87a9</hash>
        <hash alg="SHA3-384">5a99715a95629d6fbd861d401d4938d458e61c2bd71312d1e440aff16f4ca0d4be77b1f19633facbb6e68055cf5aaabe</hash>
        <hash alg="SHA3-256">f31aa3a2d6ee370690a9e0ab388c92d370e8acd6903f56e17512bbd15400ec89</hash>
        <hash alg="SHA3-512">a7d9d5e77950a3c3b350d0d032ae1d2b53f61530214bf15e802901abd217b6f030fedfd78c8b4b98096ea2930d7028fbf2101c5b1484419738e10146f420198d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke.stapler/stapler-groovy@2083.vdca_dc45fdb_0c?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/stapler/stapler-groovy</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/stapler</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.kohsuke.stapler/stapler-jelly@2083.vdca_dc45fdb_0c?type=jar">
      <group>org.kohsuke.stapler</group>
      <name>stapler-jelly</name>
      <version>2083.vdca_dc45fdb_0c</version>
      <description>Jelly binding for Stapler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47264a9af6e952213e23d79a9d49464a</hash>
        <hash alg="SHA-1">f3d9d1b0c6571add1cf746740647c19a3451fafd</hash>
        <hash alg="SHA-256">f4d341ff9055604a0ab16e173a21e12e858b938fbb0bf5ed78ce7a31577b383f</hash>
        <hash alg="SHA-512">94e6aa7f2671e79841e788dce66aea4951bb53abc51fbf8004d7b9e2d7ce5366181a66227231f941b8c96a8324fd771de14a3f1864d6ecbfc5522e98bebb25d1</hash>
        <hash alg="SHA-384">946bf6ab86b49d4e347f7d169f18d90e032a086ae082bb34939484d275ddbb3609744d53dbf537c10ed5b36ed4a8c0cc</hash>
        <hash alg="SHA3-384">8d5b6f5e280a884f7b19df1b6d0032d87da382c6326f70921af4ad7e85f05648e108cb8a8a18df58163b053a5278603d</hash>
        <hash alg="SHA3-256">141efadab347ee5e64094bb427c431a57f0204cba39029b9eb0de627ebfef0b8</hash>
        <hash alg="SHA3-512">c97ad150e03c6d036ac66abfc3381df8a1784578e4b58ea69c6f31b2d0d7e51f3062f8226e9225178978382f84442741e2ed0c9dc421251838da3705b13bb44b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.kohsuke.stapler/stapler-jelly@2083.vdca_dc45fdb_0c?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/stapler/stapler-jelly</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/stapler</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.dom4j/dom4j@2.2.0?type=jar">
      <group>org.dom4j</group>
      <name>dom4j</name>
      <version>2.2.0</version>
      <description>flexible XML framework for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e7161d8e8f5fd0055554374f469abd3</hash>
        <hash alg="SHA-1">52368b1da663abd44a866c4fe4f62c8d8695204a</hash>
        <hash alg="SHA-256">3fae79e081096e1410645eb3557c63b79ca266d510ab479889511109becd1690</hash>
        <hash alg="SHA-512">9e69d8c53b82d62d6589d56c6861455963ac64ea1c74a73b2e677be5297c104ea1ac26eb871ac92f2ee54116b3011304481070ae21a570d3b241be1cc13390ab</hash>
        <hash alg="SHA-384">4822ab504b1bbef7790e950bfb59a3e1fc18ca9ab2a55ce8fc2f76be1a397eba98e3a5d128f63ca4f9bd9051592f2709</hash>
        <hash alg="SHA3-384">0ae58855bed1d53a467220bbf3281fd0d6cc4dce3f1a0f230ca033fd8e1cdf2b7abb8b056f7b1afc72e71d92ab6e4c5d</hash>
        <hash alg="SHA3-256">ab1405d952de8cda0cf478f9371ffea6a9e50f6503e5e36f5475844d0e640fe9</hash>
        <hash alg="SHA3-512">13176aba3e5e714a432a0155382952a4976be28944b0abaaa94abe49a602107547e93f8cc0101681d30af7d8744938942663c6d16b0dbd80890039ad07267871</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.dom4j/dom4j@2.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://dom4j.github.io/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.17</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4fcd46ca51e55b9fd9b0db34474927e0</hash>
        <hash alg="SHA-1">76ea503eb688f06556a9ba69995d7eab63e34531</hash>
        <hash alg="SHA-256">affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c</hash>
        <hash alg="SHA-512">7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733</hash>
        <hash alg="SHA-384">96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd</hash>
        <hash alg="SHA3-384">252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835</hash>
        <hash alg="SHA3-256">4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92</hash>
        <hash alg="SHA3-512">3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>log4j-over-slf4j</name>
      <version>2.0.17</version>
      <description>Log4j implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec3cf11fe022ffd852ab84e9b8b69a96</hash>
        <hash alg="SHA-1">55e55c79a0b89ccc9e411049005c02b7514e0cf9</hash>
        <hash alg="SHA-256">cbf30eaf95357ab7babf9be123da9cc702f0fe83b23392b7a62589d60b5862d1</hash>
        <hash alg="SHA-512">b30293841a75c89a31cde5f756eba6b4aeb97774be9475691b2d4a7a412ff9a98f5ada1c60649a8404efb36c0091f70ced8f6389fd58fd876122f94be9169407</hash>
        <hash alg="SHA-384">38745d5c8a475079f925bda9edfe7e4d4e5cf2f916d7db025f0f9fb55390c746171975cf40decdefd1c19f34db4c794a</hash>
        <hash alg="SHA3-384">9a1274543c477f273a9cee53b5b53851588513b4975b641c8fe0cdc3f0a410e99e3d1a8ac13d5aeaf0652cc12893a819</hash>
        <hash alg="SHA3-256">4c2a8896f96b0dca903d8f1ec33b146ce2ca592f3dac0d1278bfc63430c0faa1</hash>
        <hash alg="SHA3-512">6d9d9a4f3f915a4712401d4c9b9739b4681f7804912204a7ca5ba84686decd3e9290c1db0753d7d207a1644ce8fee39cdd7539ef0929ec14c09683423010488a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-web@7.0.5?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-web</name>
      <version>7.0.5</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">766ca85b07135684bc5f8e7d57dafa41</hash>
        <hash alg="SHA-1">e78938fc30d0cbf40996f7e7d5d955b15bacfe01</hash>
        <hash alg="SHA-256">4616f13afe233600dfad8cfa4ef1472c378a080a6cbf516739c779d9267edbd9</hash>
        <hash alg="SHA-512">fe384f9e5cf27ecd54d16c3ca3bdfe5b85f68ce9b2125599c80ede3f5d8f4b0321e594c30c1ad3402c5300fa0c745fd321b836d8d5edb38bce8f615d26c82e84</hash>
        <hash alg="SHA-384">c332d90f53ec847b4f7224dabc3223d85f69898d7ebf28372f78c2e66414c6bc5ffe59cbfbe0e3b1241d4d22a91a38b4</hash>
        <hash alg="SHA3-384">a25394a64526a0c6ed7e697d2c9199072ec070f39d354827185acb0ed617ffd9cba7aa990a6e09b650b030ec1f2ae5e7</hash>
        <hash alg="SHA3-256">38162f1bef49b30e20614431958244f2c710f541a6c6b5eb17ce124e330f7f81</hash>
        <hash alg="SHA3-512">f2638b78c7566a9a7d619b44aa6f07bdb2b581104bb4b32db76210e693a9a569e81a2e5a7430a4c473324a0e56f2bf455d00cd2c8208317fb3a23c51c4c54bf0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-web@7.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-core@7.0.5?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-core</name>
      <version>7.0.5</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0a89cf0352acb65c6ec79a046cf875a8</hash>
        <hash alg="SHA-1">9d331a891df2aa811eb91ffad056bb5077e471e8</hash>
        <hash alg="SHA-256">344bfbed8025031781218cbd7891f6b9fd750d4f52c923f75948d5e7b11fc2ea</hash>
        <hash alg="SHA-512">0431a885f55e99cf235fc76bfced451b18720f27f94d30bc4b83d57be156ea93308f49d2aa4673e601f352b713af62dba193050688c909375bda47649cf765dc</hash>
        <hash alg="SHA-384">9cb7f0df0a7f84a1d39c7627d7826533157a09d941b03cb61cf6f25dcf0bfdbfac12361be22b738e4db1331cea4fcd30</hash>
        <hash alg="SHA3-384">0b417e006580f93bca6d04aa2d43f47dc392516b64629ee34cc9ce4704ddabbbe95741d2059751ceeebab11ad7e49321</hash>
        <hash alg="SHA3-256">c6328458de03cab49035f8261b4847e04a8456f7310993f11ebfe76ab922212b</hash>
        <hash alg="SHA3-512">66033e9b72ab933c7a121f3d8313e7cb769fd7de99223441f3f5c5058adcadc0489091bed9acaaaabb7f83ede86e7d620e8f40cd44b73741d1f481d5e36c4178</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-core@7.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-crypto@7.0.5?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-crypto</name>
      <version>7.0.5</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98126573edf9e16efd848da8ef8dd6e</hash>
        <hash alg="SHA-1">e18e190fe0b55b0e28ae4a64c59bb2efe5406466</hash>
        <hash alg="SHA-256">fa2dbe7ce6aea8b3b0cc82bcd09b5b4ef030cdac51b85e54d785d85f1a3d42d9</hash>
        <hash alg="SHA-512">d51c9576074c95321d41848745fd945725d4215fa2727b78233506550e54981c737ed41393fead75bd3cb85b483d392f2cca5900c6624e61f0013f93e0961166</hash>
        <hash alg="SHA-384">76c9f77b26743e9aa6d936e27168628dc60197d54858ded6b2d3e0ce502819c3e7646fb1325774db5c0ee0d096e331f5</hash>
        <hash alg="SHA3-384">64e755647e4c5a2d3c26115d8b1be43ff4e7d34452122580bb4d3d2eb30183b68d154e9a7ea893cb9a0b7b36685fc27b</hash>
        <hash alg="SHA3-256">4fc98bcdc12a77fa2b6f729d218c6c90e091f5d2da01917d5e1c38923044dc6d</hash>
        <hash alg="SHA3-512">1d61c357ac7afcae4329fb17029460f5435cd1720b76653b899946ef26ed8c9cc47d52c54e1b1f2e49b3b0f961542baa563cf96d26f712c58a74dde14ef52543</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-crypto@7.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>7.0.7</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">33ce0cb6c81faaa067b4b05dcd152188</hash>
        <hash alg="SHA-1">4f85340fd463031cd93a0629a0323bb467ae51aa</hash>
        <hash alg="SHA-256">9e1c13ed6d69002aae7ebc4b7d2d1d07e309013a2fbb63ab266bea8601229785</hash>
        <hash alg="SHA-512">fa57d61f0ba870a257816b1453111eb09a171a9e65f0c7711617624e815114e3b0829687b820480101f3b5900a84f0204b91d853c7aeaaebe98ad63fa907f51f</hash>
        <hash alg="SHA-384">1c9ed7421aa608d48a1b25a623c7b965d491d08464970baeda1064541299e62f0f0753b1906ca98c995bab11428c69e2</hash>
        <hash alg="SHA3-384">b8e8de99debd7a6e018c6f4850a468afa94d7bc03070d3d25a115b3f199241f9767088a256b53de0d53e7b2f338329cc</hash>
        <hash alg="SHA3-256">8e8a997993543f936eb1bb859afca9ed178909ec5fe3cc146fe3b82791f7b260</hash>
        <hash alg="SHA3-512">1a7e5355b55fa051eb0960aff6eb7553d115fc4dbed6968619e7b28bdbecc221acf9dff994a5d79f783833793f4ce190f652f43ae924b4aa428b08b9558b1fa5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aop@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aop</name>
      <version>7.0.7</version>
      <description>Spring AOP</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b5279f81785ea8880de565c0ce431d61</hash>
        <hash alg="SHA-1">21045648cc638653fb872da3b3fdd50b1cb7b370</hash>
        <hash alg="SHA-256">c0503b7f318368f37f0d0e0557f65e572cebdf61cf9c318a7cbcad7824b0f284</hash>
        <hash alg="SHA-512">1a2f6a51f0b4840edcc594f423f8f22e8a54ff5dbaf7aba2979e43af5c037c5eb5dba744461a0521876ec0402d19f3ffa799a1b98fec5fdfed30b40cc2c765c2</hash>
        <hash alg="SHA-384">fff6e65a0a4652909555b07489d800b73b2f6883c872eee3d30e15c52259d0fbe750607f5c97dbcbb5f8d3735b25b6e1</hash>
        <hash alg="SHA3-384">63b4fdd20c9b9afb1beed7726882e7ac6c7b741fa89bd1b0644b71f665d99a115ea0cdffed51eac09fee2dad4029ce91</hash>
        <hash alg="SHA3-256">1a16604468b85151d5141258d60f4b2df1643abcbbade5af39e76e01da45c43a</hash>
        <hash alg="SHA3-512">7f96b458b19c73cf7994dab51abe5cc5bea90e674cbb835fe29776981632ae8ab911fb5f135ef2e9b2c31f7ec9e098c9962698182ac8adbf89b412a72029d1b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aop@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>7.0.7</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e64e2ac37daeb77177a992818df2c4b</hash>
        <hash alg="SHA-1">1278f23233223c480880b62234c96fb3545ba104</hash>
        <hash alg="SHA-256">13775be4269a6cc82ebcee619a9fef1545c90ae54c6fba84a0d8c6d79ff6877a</hash>
        <hash alg="SHA-512">3dca24401f6bb80bb9379a29eef9447eca75ba6e429b896d2c7f3d2acc0cee680b46e2e8f926fb7bfe5eef14101d3fc0f0b4c17694d33f7bbaab11cc91ddaf2d</hash>
        <hash alg="SHA-384">e95ade2ec32281a92e17a45d6863edf4a6da5ebd66589a8992f5c2543bd82a2b0a964de5ce0ed06197b8a30774d22de8</hash>
        <hash alg="SHA3-384">dc004b5387bb4383ccba7db617327075e946eb1bd5d48cb406dab292c96c18c37166a7f4d1c0ab1aeef6743b68809776</hash>
        <hash alg="SHA3-256">84b272a9547277b7f1d43e683bd4f2afbc8bdd6a356795ed55b618aff7672dda</hash>
        <hash alg="SHA3-512">f281ab9551dadfdd9240655b4f26077fd7e059dbfa0ac3517dc8a8f7d37aec3ec30586bfffb8af73d5d3a71104d4d647f23b34f38c87f557951bd9fba6404cb1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-context@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-context</name>
      <version>7.0.7</version>
      <description>Spring Context</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51493daabca4825748edebc27600268b</hash>
        <hash alg="SHA-1">bd71294ceaa815abcdbbf5e116c9382103845139</hash>
        <hash alg="SHA-256">4a252050fd8595c5922c4d795728f8aae495e41171b3a958b0cee349b5e3586b</hash>
        <hash alg="SHA-512">ad2441ad6c5de8a408c463a7ce90de7810f6e7a6502d861c94f5edd914fc32343092a032b7d67897fab9bce2aca78788a778db436eb35c9a6be87ff1bdffbda5</hash>
        <hash alg="SHA-384">949ad9546fda35953f3907aff04a6337ec047301efceb1c8ef9545c49468d2025e8381768dfa83dc27b57b65a89dd0df</hash>
        <hash alg="SHA3-384">a6f52f53a227ab00a3b7dc85a1ead3c403ce78c6aa32671ac2ad30d39708f375492d94d284f4213bb2aa3851193b06a7</hash>
        <hash alg="SHA3-256">9ccc9213e639401dfc43e8b03e1b53aa40462ae7a9dc3880a6e0caf080246f80</hash>
        <hash alg="SHA3-512">7c9ffa2cfdcb914011a6f2f27aac99bf9a06b0f02abc9db3a7b61e2f203c33b59636da59e1ae7a91cfc26114338c8a53c871522997beeaaf3d6e16e6f05787a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-context@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-expression@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-expression</name>
      <version>7.0.7</version>
      <description>Spring Expression Language (SpEL)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">848e75396f49b8f787591947fa468fa8</hash>
        <hash alg="SHA-1">90c3dc3174244786c33eb3a2be8c5006cfc7389b</hash>
        <hash alg="SHA-256">3c23d7eb62bb3fbddc0ad1d7f94be94d1518424f1c9a1b4de6b1b6906e8d0c54</hash>
        <hash alg="SHA-512">25d7b37ebea30f2a89957e02243e8cb8cd2efcc6776f90decc2aa42199d51b18f2a94567c9cb5715fb91a5bf73928ef79400012ab9a4b95416b8f315690d347b</hash>
        <hash alg="SHA-384">5a52099a77e49c46e291d12fb52c3409d54c8d9dcce7f64a730a3f188f9ad37ff906f044999133038e147a730597047f</hash>
        <hash alg="SHA3-384">051ffbefeb83e268e0867b0bde7d6671b3f37d2fb37a8b6882521d37459574b48642fc982848f67fac5cbdbeb3498533</hash>
        <hash alg="SHA3-256">c0b7301863f7a4d7a9612500d20cc4699ae3711bb019da877bef67325f87d911</hash>
        <hash alg="SHA3-512">a0f3ba8968e797da4002a5e1c25ae37b8a91f50720d6e96b89799fd8c266d6a9d1e4664cbe197665559af3132ff69d255dd35f9efd608f7949be11d48fbb7889</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-expression@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-web@7.0.7?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-web</name>
      <version>7.0.7</version>
      <description>Spring Web</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a3073643babe877cc72660db4010510b</hash>
        <hash alg="SHA-1">8c6ba7dd1ef6a3d9246b08885185806426daa7ec</hash>
        <hash alg="SHA-256">dbc9298d83849fb0255791fb86b80e996cfc482801ce4879481ad733d225c518</hash>
        <hash alg="SHA-512">d8bc6760900cd7e5d920d55987f5304b1f2164707644ba4840e3f956dc6832df845b78ad5f958f9e614a2661587d84ba5a821754c428ebbaeae026c4a4a24fbc</hash>
        <hash alg="SHA-384">355a2737fa7395570d7b079f167c7166e08f63c927e9265945d80ef19da4676d1706b30c5d78aeb43401e31124c38744</hash>
        <hash alg="SHA3-384">8d9efbf3188288d430d0b124e86fe81b8d9d744f605fac5de1febe72bbd126e203132b01bc54b728cac80ac8f9fae081</hash>
        <hash alg="SHA3-256">c12e94509ae26c453bfc8264f358b21b709a7a786c79f3ed61a9390a2275fdc7</hash>
        <hash alg="SHA3-512">35acf7e509e7ea052684dc48d51dcb18e49c08a09a5fc034d84e306ad02a522b6e5d97239a01eeaea6893dde7dd905556e1495626d47aaef7f56aff70f333a58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-web@7.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xpp3/xpp3@1.1.4c?type=jar">
      <publisher>Extreme! Lab, Indiana University</publisher>
      <group>xpp3</group>
      <name>xpp3</name>
      <version>1.1.4c</version>
      <description>MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot in JDK 1.4+.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e3c39f391e4994888b7d0030f775804</hash>
        <hash alg="SHA-1">9b988ea84b9e4e9f1874e390ce099b8ac12cfff5</hash>
        <hash alg="SHA-256">0341395a481bb887803957145a6a37879853dd625e9244c2ea2509d9bb7531b9</hash>
        <hash alg="SHA-512">a5308937f7bf0c87d1ce2f5986961b8fbaf4d86eaca2ced3c8881b319d29ed777b240104792697375c036c3dd17b2af6c4de73fa3fb0d1854146e67607da9fa9</hash>
        <hash alg="SHA-384">144b609c0a997e93c1ea0adf7e9c8b5955cbef399ceb325ed66180d13e2ffba27ca259a3d808096511f7fb98b6e48531</hash>
        <hash alg="SHA3-384">52ed6b4ab6aa93d5afdaad7d1a919833effe663d66fc2af4044dd01c365a1a5e69140a1063f664b934e45bb9a69200a9</hash>
        <hash alg="SHA3-256">f670caeef9678a60ec11e48bc6e219e8cbd31428f78fccb591c96bbb672f2d32</hash>
        <hash alg="SHA3-512">a21d3f3c321bacd68de853162a06a36dde5e15a0ef2dc1ff2f8c60d3f367685eb6e5fe1f79dcf8ae1fd609eb3c3022e6433b1c0159d698c31c9d2c6ea68b8433</hash>
      </hashes>
      <licenses>
        <license>
          <name>Indiana University Extreme! Lab Software License, vesion 1.1.1</name>
          <url>http://www.extreme.indiana.edu/viewcvs/~checkout~/XPP3/java/LICENSE.txt</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>http://creativecommons.org/licenses/publicdomain</url>
        </license>
        <license>
          <id>Apache-1.1</id>
          <url>http://apache.org/licenses/LICENSE-1.1</url>
        </license>
      </licenses>
      <purl>pkg:maven/xpp3/xpp3@1.1.4c?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/</url>
        </reference>
        <reference type="vcs">
          <url>http://www.extreme.indiana.edu/viewcvs/~checkout~/XPP3/java/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jenkins-ci.main/websocket-jetty12-ee9@2.562-rc38227.49626ca_f6f50?type=jar">
      <group>org.jenkins-ci.main</group>
      <name>websocket-jetty12-ee9</name>
      <version>2.562-rc38227.49626ca_f6f50</version>
      <description>An implementation of the WebSocket handler that works with Jetty 12 (EE 9).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a397d5785cb7d5ab27295b75fce33db</hash>
        <hash alg="SHA-1">b614010c24216ea072f00e2c9afe8a7c35205485</hash>
        <hash alg="SHA-256">c6af38486a7c9f962547e2d277842531602185a86d676ec88ee16c3f9df2a3d4</hash>
        <hash alg="SHA-512">4a2b32491db46b393cfa2d7255f3e39e45cd11c927038f6456037ec92ebf53764e9ee7235c0cfd82db9ee264fff3123b6718b7ebbc4a4115d3e4926db3a44be4</hash>
        <hash alg="SHA-384">01045c93520dd786cc09fa6db66b8b10f943c45658d4d0dc9f966eebd3ceaf505b7cf68573b670e3568b2e9291af7a15</hash>
        <hash alg="SHA3-384">4045cd9ce6ee2d95512c5c73ccca2bfcff4143aa5335d342c751258e3f6a519796dbab3f8a882b50f4a2cc02564a769b</hash>
        <hash alg="SHA3-256">5e56a1bfc1a40996a7e40b6a9b84ab809676741b9dcb297be645b7297e4eb11e</hash>
        <hash alg="SHA3-512">3c2c29880137fba65105b8f8fc34a7b4168fd11b4591bb9ffc889f6849a5f272a5e7a0808d3d040cef774ce6fc638f4d8d6644c2979fad19d8f666ce2d2b870c</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jenkins-ci.main/websocket-jetty12-ee9@2.562-rc38227.49626ca_f6f50?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jenkinsci/jenkins/websocket/websocket-jetty12-ee9</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.jenkins.io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.jenkins-ci.org/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jenkinsci/jenkins/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/g/jenkinsci-advisories</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jenkinsci/jenkins</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-jdk14@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-jdk14</name>
      <version>2.0.17</version>
      <description>SLF4J JDK14 Provider</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bd0c52cec5bf1902175bfe6d7d5f30bc</hash>
        <hash alg="SHA-1">69829f245d0720a6e7a796e4920f2393f29bdece</hash>
        <hash alg="SHA-256">ead25c1b15f59db1fb5552b76fe63de4164f0df40024d19287b75dece47ad3be</hash>
        <hash alg="SHA-512">fb45ac0f21bb57454db3073ec34ca7714910fbb71e75fed9605006b588062fc906a2f2be3bf2a7f5f4b67106c5360a5d924b074bf01c3e2b89fa676b02a7f590</hash>
        <hash alg="SHA-384">2a5deb43b42799413b598c29679aa69a18534e736cd6340198a0506e30b8685c46ff60c80332df7129af96cd85d7c89c</hash>
        <hash alg="SHA3-384">a82f15987ca9e865f208d662ee870077699cde165cfde01beae29789cb7068b95146b4e64be9db8045d132cca8856010</hash>
        <hash alg="SHA3-256">9d3afe04c5d01722f1551bb8c3b1b78893715ea42f75b1125ed8528c5d6d8002</hash>
        <hash alg="SHA3-512">7e91df2f042310d9915b4760ca8d8c9347f5bd0b9d2fe0b147c155379a12f4ca8dd4be2a7272a005b891fcfc1c5ae01f1020758c99c013eb84ba6f37cd792973</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-jdk14@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-jdk14</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.jenkins-ci.main/jenkins-war@2.562-rc38227.49626ca_f6f50?type=war">
      <dependency ref="pkg:maven/org.jenkins-ci.main/cli@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci.main/remoting@3355.v388858a_47b_33?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci.main/jenkins-core@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci.main/websocket-jetty12-ee9@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-jdk14@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci.main/cli@2.562-rc38227.49626ca_f6f50?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci.main/remoting@3355.v388858a_47b_33?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci.main/jenkins-core@2.562-rc38227.49626ca_f6f50?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci.main/cli@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci.main/remoting@3355.v388858a_47b_33?type=jar"/>
      <dependency ref="pkg:maven/args4j/args4j@2.37?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.6.0-jre?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.txw2/txw2@20110809?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.xstream/xstream@1.4.21?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/io.jenkins.tools/bridge-method-annotation@1.32?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/jaxen/jaxen@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/jline/jline@2.14.6?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar"/>
      <dependency ref="pkg:maven/net.java.sezpoz/sezpoz@1.13?type=jar"/>
      <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.groovy/groovy-all@2.4.21?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.jansi/jansi@1.11?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-fmt@1.1-jenkins-20260418?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-xml@1.1-jenkins-20260418?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jexl@1.1-jenkins-20111212?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/crypto-util@1.11?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/memory-monitor@1.13?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/symbol-annotation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/task-reactor@1.10?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/version-number@1.14?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci.main/websocket-spi@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.jfree/jfreechart@1.0.19?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.hudson/commons-jelly-tags-define@1.1-jenkins-20260418?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.localizer/localizer@1.31?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.winp/winp@1.31?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke/access-modifier-annotation@1.35?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke/windows-package-checker@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke.stapler/json-lib@2.4-jenkins-15?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-adjunct-codemirror@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-groovy@2083.vdca_dc45fdb_0c?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.security/spring-security-web@7.0.5?type=jar"/>
      <dependency ref="pkg:maven/xpp3/xpp3@1.1.4c?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/args4j/args4j@2.37?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@33.6.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject/guice@6.0.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.6.0-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.txw2/txw2@20110809?type=jar">
      <dependency ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar"/>
    <dependency ref="pkg:maven/com.thoughtworks.xstream/xstream@1.4.21?type=jar">
      <dependency ref="pkg:maven/io.github.x-stream/mxparser@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.github.x-stream/mxparser@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/io.jenkins.tools/bridge-method-annotation@1.32?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/jaxen/jaxen@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/jline/jline@2.14.6?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar"/>
    <dependency ref="pkg:maven/net.java.sezpoz/sezpoz@1.13?type=jar"/>
    <dependency ref="pkg:maven/net.jcip/jcip-annotations@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant@1.10.17?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M5?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.groovy/groovy-all@2.4.21?type=jar"/>
    <dependency ref="pkg:maven/org.fusesource.jansi/jansi@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-fmt@1.1-jenkins-20260418?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jexl@1.1-jenkins-20111212?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/commons-jexl@1.1-jenkins-20111212?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly-tags-xml@1.1-jenkins-20260418?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/crypto-util@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci/memory-monitor@1.13?type=jar">
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.18.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/symbol-annotation@1.26?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jenkins-ci/task-reactor@1.10?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci/version-number@1.14?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci.main/websocket-spi@2.562-rc38227.49626ca_f6f50?type=jar"/>
    <dependency ref="pkg:maven/org.jfree/jfreechart@1.0.19?type=jar">
      <dependency ref="pkg:maven/org.jfree/jcommon@1.0.23?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jfree/jcommon@1.0.23?type=jar"/>
    <dependency ref="pkg:maven/org.jvnet.hudson/commons-jelly-tags-define@1.1-jenkins-20260418?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jvnet.localizer/localizer@1.31?type=jar"/>
    <dependency ref="pkg:maven/org.jvnet.winp/winp@1.31?type=jar"/>
    <dependency ref="pkg:maven/org.kohsuke/access-modifier-annotation@1.35?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci/annotation-indexer@1.213.v92788b_1f0a_21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.kohsuke/windows-package-checker@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.kohsuke.stapler/json-lib@2.4-jenkins-15?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.22.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet5@2.0.0-M5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.9?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet/tiger-types@2.2?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.localizer/localizer@1.31?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke.stapler/json-lib@2.4-jenkins-15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.9?type=jar"/>
    <dependency ref="pkg:maven/org.jvnet/tiger-types@2.2?type=jar"/>
    <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-adjunct-codemirror@1.3?type=jar">
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-groovy@2083.vdca_dc45fdb_0c?type=jar">
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-jelly@2083.vdca_dc45fdb_0c?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.groovy/groovy-all@2.4.21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.kohsuke.stapler/stapler-jelly@2083.vdca_dc45fdb_0c?type=jar">
      <dependency ref="pkg:maven/org.kohsuke.stapler/stapler@2083.vdca_dc45fdb_0c?type=jar"/>
      <dependency ref="pkg:maven/org.dom4j/dom4j@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.jenkins-ci/commons-jelly@1.1-jenkins-20260418?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.dom4j/dom4j@2.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-web@7.0.5?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-core@7.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-core@7.0.5?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@7.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@7.0.5?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-aop@7.0.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-context@7.0.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-expression@7.0.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-web@7.0.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@7.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@7.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xpp3/xpp3@1.1.4c?type=jar"/>
    <dependency ref="pkg:maven/org.jenkins-ci.main/websocket-jetty12-ee9@2.562-rc38227.49626ca_f6f50?type=jar">
      <dependency ref="pkg:maven/org.jenkins-ci.main/websocket-spi@2.562-rc38227.49626ca_f6f50?type=jar"/>
      <dependency ref="pkg:maven/org.kohsuke/access-modifier-annotation@1.35?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-jdk14@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
  </dependencies>
</bom>
